starlingx
/
tools
Code Issues Proposed changes

libunbound: Upgrade to 1.13.1-1+deb11u2 

Upgrade package libunbound8 and libunbound-dev from 1.13.1-1+deb11u1
to 1.13.1-1+deb11u2 in order to fixing the CVE issue CVE-2023-50387
and CVE-2023-50868.

Refer to:
https://nvd.nist.gov/vuln/detail/CVE-2023-50387
https://nvd.nist.gov/vuln/detail/CVE-2023-50868
https://security-tracker.debian.org/tracker/DSA-5620-1

TestPlan:
PASS: downloader; build-pkgs; build-image
PASS: Jenkins Installation

Closes-Bug: 2054276

Change-Id: I646be1b0d6c0f8be2108a68d1ac1c9ad78eee519
Signed-off-by: Peng Zhang <Peng.Zhang2@windriver.com>
This commit is contained in:
Peng Zhang 2024-02-21 07:15:41 +00:00
parent 14d5030d09
commit 24d8e4e82c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
debian-mirror-tools/config/debian/common/base-bullseye.lst
View File

@ -704,8 +704,8 @@ libtsan0 10.2.1-6
libubsan1 10.2.1-6
libuchardet0 0.0.7-1
libudev1 247.3-7+deb11u1 https://snapshot.debian.org/archive/debian/20220829T032859Z/pool/main/s/systemd/libudev1_247.3-7+deb11u1_amd64.deb
libunbound8 1.13.1-1+deb11u1 https://snapshot.debian.org/archive/debian/20230508T030704Z/pool/main/u/unbound/libunbound8_1.13.1-1+deb11u1_amd64.deb
libunbound-dev 1.13.1-1+deb11u1 https://snapshot.debian.org/archive/debian/20230508T030704Z/pool/main/u/unbound/libunbound-dev_1.13.1-1+deb11u1_amd64.deb
libunbound8 1.13.1-1+deb11u2 https://snapshot.debian.org/archive/debian-security/20240214T064720Z/pool/updates/main/u/unbound/libunbound8_1.13.1-1%2Bdeb11u2_amd64.deb
libunbound-dev 1.13.1-1+deb11u2 https://snapshot.debian.org/archive/debian-security/20240214T064720Z/pool/updates/main/u/unbound/libunbound-dev_1.13.1-1%2Bdeb11u2_amd64.deb
libunistring2 0.9.10-4
liburing-dev 0.7-3
liburing1 0.7-3