- -------------------------------------------------------------------------
Debian LTS Advisory DLA-3859-1                debian-lts@lists.debian.org
https://www.debian.org/lts/security/                          Adrian Bunk
September 02, 2024                            https://wiki.debian.org/LTS
- -------------------------------------------------------------------------

Package        : systemd
Version        : 247.3-7+deb11u6
CVE ID         : CVE-2023-7008 CVE-2023-50387 CVE-2023-50868
Debian Bug     : 1059278

Multiple vulnerabilities have been fixed in systemd, the default init 
system in Debian, when using systemd-resolved with DNSSEC.

CVE-2023-7008

    Don't accept records of DNSSEC-signed domains when they have no signature.

CVE-2023-50387

    DNSSEC denial of service (CPU consumption)

CVE-2023-50868

    DNSSEC denial of service (CPU consumption)

For Debian 11 bullseye, these problems have been fixed in version
247.3-7+deb11u6.

We recommend that you upgrade your systemd packages.

For the detailed security status of systemd please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/systemd

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS