ELSA-2024-11232

ELSA-2024-11232 - unbound:1.16.2 security update

Type:	SECURITY
Severity:	MODERATE
Release Date:	2024-12-19

Description

[1.16.2-8.1]
- Fix unbounded name compression could lead to Denial of Service (CVE-2024-8508)

[1.16.2-8]
- Ensure group access correction reaches also updated configs (CVE-2024-1488)

[1.16.2-7]
- Ensure only unbound group can change configuration (CVE-2024-1488)

[1.16.2-6]
- Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
- Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
- Resolves: RHEL-25671
- Resolves: RHEL-25643

Related CVEs

CVE-2024-8508

Updated Packages

Release/Architecture	Filename	MD5sum	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	unbound-1.16.2-8.el9_5.1.src.rpm	f990ffce728d1f15c336aa71a5f886cf	-	ol9_aarch64_appstream
	unbound-1.16.2-8.el9_5.1.src.rpm	f990ffce728d1f15c336aa71a5f886cf	-	ol9_aarch64_codeready_builder
	python3-unbound-1.16.2-8.el9_5.1.aarch64.rpm	9ccd3d8e874656a814a354ef07697912	-	ol9_aarch64_appstream
	unbound-1.16.2-8.el9_5.1.aarch64.rpm	2bc02356aff25660a4323a6fd8e01645	-	ol9_aarch64_appstream
	unbound-devel-1.16.2-8.el9_5.1.aarch64.rpm	e34b43d173663ac5ea9cd2000b708b2d	-	ol9_aarch64_codeready_builder
	unbound-libs-1.16.2-8.el9_5.1.aarch64.rpm	c668866c8082a90309e0bb695eb3fe3c	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	unbound-1.16.2-8.el9_5.1.src.rpm	f990ffce728d1f15c336aa71a5f886cf	-	ol9_x86_64_appstream
	unbound-1.16.2-8.el9_5.1.src.rpm	f990ffce728d1f15c336aa71a5f886cf	-	ol9_x86_64_codeready_builder
	python3-unbound-1.16.2-8.el9_5.1.x86_64.rpm	3375164d23ad8f2106b50633891eddfe	-	ol9_x86_64_appstream
	unbound-1.16.2-8.el9_5.1.x86_64.rpm	3094bff8d207d1c41130cf2141fa97d8	-	ol9_x86_64_appstream
	unbound-devel-1.16.2-8.el9_5.1.i686.rpm	768502fc79c8d27d27646389aca5f9b6	-	ol9_x86_64_codeready_builder
	unbound-devel-1.16.2-8.el9_5.1.x86_64.rpm	1e00064a8769f9bca4987bc8a2d764fa	-	ol9_x86_64_codeready_builder
	unbound-libs-1.16.2-8.el9_5.1.i686.rpm	ba4e0c217719a0d3190540c6486429ba	-	ol9_x86_64_appstream
	unbound-libs-1.16.2-8.el9_5.1.x86_64.rpm	ff62d8e85558fcbf1877951728400211	-	ol9_x86_64_appstream