gpp_maybe Security update for unbound

SUSE-SLE-Module-Basesystem-15-SP3-2022-176

This update for unbound fixes the following issues: - CVE-2019-25031: Fixed configuration injection in create_unbound_ad_servers.sh upon a successful man-in-the-middle attack (bsc#1185382). - CVE-2019-25032: Fixed integer overflow in the regional allocator via regional_alloc (bsc#1185383). - CVE-2019-25033: Fixed integer overflow in the regional allocator via the ALIGN_UP macro (bsc#1185384). - CVE-2019-25034: Fixed integer overflow in sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write (bsc#1185385). - CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par (bsc#1185386). - CVE-2019-25036: Fixed assertion failure and denial of service in synth_cname (bsc#1185387). - CVE-2019-25037: Fixed assertion failure and denial of service in dname_pkt_copy via an invalid packet (bsc#1185388). - CVE-2019-25038: Fixed integer overflow in a size calculation in dnscrypt/dnscrypt.c (bsc#1185389). - CVE-2019-25039: Fixed integer overflow in a size calculation in respip/respip.c (bsc#1185390). - CVE-2019-25040: Fixed infinite loop via a compressed name in dname_pkt_copy (bsc#1185391). - CVE-2019-25041: Fixed assertion failure via a compressed name in dname_pkt_copy (bsc#1185392). - CVE-2019-25042: Fixed out-of-bounds write via a compressed name in rdata_copy (bsc#1185393). - CVE-2020-28935: Fixed symbolic link traversal when writing PID file (bsc#1179191).

• Release Date
  Jan 25 2022
• References
  Bugzilla: 1076963, 1112009, 1112033, 1179191, 1185382, 1185383, 1185384, 1185385, 1185386, 1185387, 1185388, 1185389, 1185390, 1185391, 1185392, 1185393
  CVEs: CVE-2019-25031, CVE-2019-25032, CVE-2019-25033, CVE-2019-25034, CVE-2019-25035, CVE-2019-25036, CVE-2019-25037, CVE-2019-25038, CVE-2019-25039, CVE-2019-25040, CVE-2019-25041, CVE-2019-25042, CVE-2020-28935
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.3 x86_64

• Packages
  libunbound2
  Shared library from unbound

  1.6.8-10.6.1 lock rpm

  unbound
  Validating, recursive, and caching DNS(SEC) resolver

  1.6.8-10.6.1 lock src

  unbound-anchor
  Unbound Anchor cert management tools

  1.6.8-10.6.1 lock rpm

  unbound-devel
  Development files for libunbound

  1.6.8-10.6.1 lock rpm

Basesystem Module 15.3 aarch64

• Packages
  libunbound2
  Shared library from unbound

  1.6.8-10.6.1 lock rpm

  unbound
  Validating, recursive, and caching DNS(SEC) resolver

  1.6.8-10.6.1 lock src

  unbound-anchor
  Unbound Anchor cert management tools

  1.6.8-10.6.1 lock rpm

  unbound-devel
  Development files for libunbound

  1.6.8-10.6.1 lock rpm

Basesystem Module 15.3 ppc64le

• Packages
  libunbound2
  Shared library from unbound

  1.6.8-10.6.1 lock rpm

  unbound
  Validating, recursive, and caching DNS(SEC) resolver

  1.6.8-10.6.1 lock src

  unbound-anchor
  Unbound Anchor cert management tools

  1.6.8-10.6.1 lock rpm

  unbound-devel
  Development files for libunbound

  1.6.8-10.6.1 lock rpm

Basesystem Module 15.3 s390x

• Packages
  libunbound2
  Shared library from unbound

  1.6.8-10.6.1 lock rpm

  unbound
  Validating, recursive, and caching DNS(SEC) resolver

  1.6.8-10.6.1 lock src

  unbound-anchor
  Unbound Anchor cert management tools

  1.6.8-10.6.1 lock rpm

  unbound-devel
  Development files for libunbound

  1.6.8-10.6.1 lock rpm