Revision Date: | 2020-06-29 | Version: | 1 |
Title: | Security update for unbound (Important) |
Description: |
This update for unbound fixes the following issues:
- CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889). - CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889). - CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268).
This update was imported from the SUSE:SLE-15-SP1:Update update project.
|
Family: | unix | Class: | patch |
Status: | | Reference(s): | 1157268 1171889 CVE-2019-18934 CVE-2020-12662 CVE-2020-12663 openSUSE-SU-2020:0913-1
|
Platform(s): | openSUSE Leap 15.2
| Product(s): | |
Definition Synopsis |
openSUSE Leap 15.2 is installed AND Package Information
libunbound-devel-mini-1.6.8-lp152.9.3.1 is installed
OR libunbound2-1.6.8-lp152.9.3.1 is installed
OR unbound-1.6.8-lp152.9.3.1 is installed
OR unbound-anchor-1.6.8-lp152.9.3.1 is installed
OR unbound-devel-1.6.8-lp152.9.3.1 is installed
OR unbound-munin-1.6.8-lp152.9.3.1 is installed
OR unbound-python-1.6.8-lp152.9.3.1 is installed
|