This bug was fixed in the package unbound - 1.22.0-1ubuntu1
---------------
unbound (1.22.0-1ubuntu1) plucky; urgency=medium
* Merge with Debian unstable (LP: #2087526, LP: #2085302). Remaining changes:
- Don't build with hiredis on i386. hiredis and redis are not built
on i386 and require bootstrapping due to circular
build-dependencies; simpler to just disable this in the i386
unbound server binary (that no one will ever use).
* Dropped:
- SECURITY UPDATE: null pointer dereference
+ debian/patches/CVE-2024-43167-1.patch: fix null pointer
dereference issue in function ub_ctx_set_fwd of file
libunbound/libunbound.c
+ debian/patches/CVE-2024-43167-2.patch: fix to print a parse
error when config is read with no name for a forward-zone, stub-
zone or view.
+ CVE-2024-43167
[Fixed upstream]
- SECURITY UPDATE: denial of service via large RRsets compression
+ debian/patches/CVE-2024-8508.patch: limit name compression
calculations per packet to avoid CPU lockup in util/data/msgencode.c
+ CVE-2024-8508
[Fixed upstream]
unbound (1.22.0-1) unstable; urgency=medium
* new upstream release (1.22.0)
unbound (1.21.1-1) unstable; urgency=medium
* new upstream release 1.21.1
Closes: #1078647, CVE-2024-43167 (NULL ptr deref in ub_ctx_set_fwd)
Closes: #1083282, CVE-2024-8508 (Unbounded name compression)
-- Andreas Hasenack <[email protected]> Tue, 28 Jan 2025 18:44:57
-0300
** Changed in: unbound (Ubuntu Plucky)
Status: In Progress => Fix Released
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-43167
** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2024-8508
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2087526
Title:
unbound cannot start with large zone files > 24.000 lines : memory
exhausted
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/2087526/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
