ELSA-2024-11232

ELSA-2024-11232 - unbound:1.16.2 security update

Type:	SECURITY
Impact:	MODERATE
Release Date:	2024-12-19

Description

[1.16.2-8.1]
- Fix unbounded name compression could lead to Denial of Service (CVE-2024-8508)

[1.16.2-8]
- Ensure group access correction reaches also updated configs (CVE-2024-1488)

[1.16.2-7]
- Ensure only unbound group can change configuration (CVE-2024-1488)

[1.16.2-6]
- Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
- Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
- Resolves: RHEL-25671
- Resolves: RHEL-25643

Related CVEs

CVE-2024-8508

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 9 (aarch64)	unbound-1.16.2-8.el9_5.1.src.rpm	178a7c9a0eb60c63008a9d9665571ade9bb33ae698fae3909c3e639b44a50dad	-	ol9_aarch64_appstream
	unbound-1.16.2-8.el9_5.1.src.rpm	178a7c9a0eb60c63008a9d9665571ade9bb33ae698fae3909c3e639b44a50dad	-	ol9_aarch64_codeready_builder
	python3-unbound-1.16.2-8.el9_5.1.aarch64.rpm	4323dbc4a65e8429d7bea83744aaff4c23ea962fd9c63c0707b61da42a59edc4	-	ol9_aarch64_appstream
	unbound-1.16.2-8.el9_5.1.aarch64.rpm	7e489b6904100284e1c414960f077dc8a9935757a8e91cc53ac97b067e21fddf	-	ol9_aarch64_appstream
	unbound-devel-1.16.2-8.el9_5.1.aarch64.rpm	119305d94d40ae53e974645731e3fd9e46ecf0163ff9b3f193fc0b83c90e7f73	-	ol9_aarch64_codeready_builder
	unbound-libs-1.16.2-8.el9_5.1.aarch64.rpm	8e6f441c81f343f5b38b3e65c97deff66b78e23d0937bb322159c3e5d05dc511	-	ol9_aarch64_appstream
Oracle Linux 9 (x86_64)	unbound-1.16.2-8.el9_5.1.src.rpm	178a7c9a0eb60c63008a9d9665571ade9bb33ae698fae3909c3e639b44a50dad	-	ol9_x86_64_appstream
	unbound-1.16.2-8.el9_5.1.src.rpm	178a7c9a0eb60c63008a9d9665571ade9bb33ae698fae3909c3e639b44a50dad	-	ol9_x86_64_codeready_builder
	python3-unbound-1.16.2-8.el9_5.1.x86_64.rpm	d12552e922679c8c81f26a02391314ee7434c6cbd93ef7fb2f32f4e8a3608421	-	ol9_x86_64_appstream
	unbound-1.16.2-8.el9_5.1.x86_64.rpm	c2b97f2797647fee9b9bed489136abc31ea8348566acfa1a4d8cf396fb538fcb	-	ol9_x86_64_appstream
	unbound-devel-1.16.2-8.el9_5.1.i686.rpm	604215c5019012672839c1d996c043a75803c8a6a8a2b1640b21bf41992b455a	-	ol9_x86_64_codeready_builder
	unbound-devel-1.16.2-8.el9_5.1.x86_64.rpm	583825661bdb5f101a3dbf15f7a382c07776c10c6334e0385baa8e872f2d2861	-	ol9_x86_64_codeready_builder
	unbound-libs-1.16.2-8.el9_5.1.i686.rpm	a1e08340fffcee09529c0ed6ae87f7a74c7caa21ed7c0d9297c8be6bab389f50	-	ol9_x86_64_appstream
	unbound-libs-1.16.2-8.el9_5.1.x86_64.rpm	dcfa33812e9b29d1c03cdc617780d1c67b1612e050005dee0f88325d9e215562	-	ol9_x86_64_appstream

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team