ELSA-2021-1853

ELSA-2021-1853 - unbound security, bug fix, and enhancement update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2021-05-25

Description

[1.7.3-15]
- Fix SPEC file to not check md5 mtime and size of /var/lib/unbound/root.key
- Resolves: rhbz#1714175
- Use system-wide crypto policy setting (PROFILE=SYSTEM) instead of custom setting
- Resolves: rhbz#1842837
- Enable additional logging in unbound
- Resolves: rhbz#1850460
- security hardening from x41 report
- Resolves: rhbz#1859933
- symbolic link traversal when writing PID file
- Resolves: rhbz#1899058

Related CVEs

CVE-2019-25038

CVE-2019-25039

CVE-2019-25037

CVE-2019-25041

CVE-2019-25032

CVE-2019-25036

CVE-2020-28935

CVE-2019-25040

CVE-2019-25034

CVE-2019-25035

CVE-2019-25042

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 8 (aarch64)	unbound-1.7.3-15.el8.src.rpm	96b2bc3c0ae76970c2e43d31e285cafc251cb47dca78676285fcafd59c67a790	-	ol8_aarch64_appstream
	python3-unbound-1.7.3-15.el8.aarch64.rpm	4a12adbabeffc0e47c088f177439b9e0ee1805697611b5a745038fb3662a355d	-	ol8_aarch64_appstream
	unbound-1.7.3-15.el8.aarch64.rpm	70bf8872d79e7fe8ce27fdd74e8601bf73e594fa84ded1c395997265a2e5cdc1	-	ol8_aarch64_appstream
	unbound-devel-1.7.3-15.el8.aarch64.rpm	b0a16a2b97dc702f351ceb5110ecc3aa58e34a16b30f13d1bf6bb1f313f476ef	-	ol8_aarch64_appstream
	unbound-libs-1.7.3-15.el8.aarch64.rpm	8da8a7e9104377ca4f16f51bff95871edb2b3a22e9b692158856d37e5db5737c	-	ol8_aarch64_appstream
Oracle Linux 8 (x86_64)	unbound-1.7.3-15.el8.src.rpm	96b2bc3c0ae76970c2e43d31e285cafc251cb47dca78676285fcafd59c67a790	-	ol8_x86_64_appstream
	python3-unbound-1.7.3-15.el8.x86_64.rpm	0d7e954fb6c8853f0bd4b3181b63235a081703f6a3c358cf6cc22c1b3ae549a2	-	ol8_x86_64_appstream
	unbound-1.7.3-15.el8.x86_64.rpm	f65d8cfcef873e510ef7dcf00108a79d25974b239b38460b5ac67e9fc1bf936f	-	ol8_x86_64_appstream
	unbound-devel-1.7.3-15.el8.i686.rpm	331ab1f126dc8243c07274aed017705ff5caf47fcf2554339b8be588c5aef58d	-	ol8_x86_64_appstream
	unbound-devel-1.7.3-15.el8.x86_64.rpm	b4ac132ffe6579ecefd51b9d45981f2c480cd27f85349004a46f13f587187315	-	ol8_x86_64_appstream
	unbound-libs-1.7.3-15.el8.i686.rpm	ef644ce694dd7dc91376ea1f24d5b5c54e12b1022f12322d897213e5ddb61b25	-	ol8_x86_64_appstream
	unbound-libs-1.7.3-15.el8.x86_64.rpm	2bca207d738aff5c843efe4ab3d8f206401962f15aeda21db44451e9d3f2b25f	-	ol8_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team