Debian: DSA-5620-1: unbound security update

Two vulnerabilities were discovered in unbound, a validating, recursive, caching DNS resolver. Specially crafted DNSSEC answers could lead unbound down a very CPU intensive and time costly DNSSEC (CVE-2023-50387) or NSEC3 hash (CVE-2023-50868) validation path,

cpu cve debian dns dnssec down dsa hash path resolver security security update unbound update validation vulnerabilities