-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-8b20de41f0 2024-04-19 21:20:20.799546 --------------------------------------------------------------------------------
Name : unbound Product : Fedora 40 Version : 1.19.3 Release : 1.fc40 URL : https://nlnetlabs.nl/projects/unbound/ Summary : Validating, recursive, and caching DNS(SEC) resolver Description : Unbound is a validating, recursive, and caching DNS(SEC) resolver.
The C implementation of Unbound is developed and maintained by NLnet Labs. It is based on ideas and algorithms taken from a java prototype developed by Verisign labs, Nominet, Kirei and ep.net.
Unbound is designed as a set of modular components, so that also DNSSEC (secure DNS) validation and stub-resolvers (that do not run as a server, but are linked into an application) are easily possible.
-------------------------------------------------------------------------------- Update Information:
Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672. Bug fixes https://nlnetlabs.nl/projects/unbound/download/#unbound-1-19-3 CVE-2024-1931 - Fix trim of EDE text from large udp responses from spinning cpu. -------------------------------------------------------------------------------- ChangeLog:
* Fri Apr 12 2024 Petr Men����k pemensik@redhat.com - 1.19.3-1 - Update to 1.19.3 (rhbz#2268404) - Fix CVE-2024-1931, Denial of service when trimming EDE text on positive replies. (rhbz#2268419) - Use the origin (DNAME) TTL for synthesized CNAMEs as per RFC 6672. - Bug fixes * Sat Mar 9 2024 Paul Wouters paul.wouters@aiven.io - 1.19.1-4 - Add spec file comment -------------------------------------------------------------------------------- References:
[ 1 ] Bug #2268404 - unbound-1.19.3 is available https://bugzilla.redhat.com/show_bug.cgi?id=2268404 [ 2 ] Bug #2268419 - CVE-2024-1931 unbound: Infinite loop due to improper EDE message size check [fedora-all] https://bugzilla.redhat.com/show_bug.cgi?id=2268419 --------------------------------------------------------------------------------
This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-8b20de41f0' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label
All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys --------------------------------------------------------------------------------
package-announce@lists.fedoraproject.org