(RHSA-2024:0981) Important: unbound security update

2024-02-2609:13:42

access.redhat.com

unbound

security update

cpu consumption

resource exhaustion

0.05 Low

EPSS

Percentile

92.9%

JSON

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

bind9: KeyTrap - Extreme CPU consumption in DNSSEC validator (CVE-2023-50387)
bind9: Preparing an NSEC3 closest encloser proof can exhaust CPU resources (CVE-2023-50868)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

OSVersionArchitecturePackageVersionFilename
RedHat9x86_64unbound-debuginfo< 1.16.2-3.el9_2.1unbound-debuginfo-1.16.2-3.el9_2.1.x86_64.rpm
RedHat9i686python3-unbound-debuginfo< 1.16.2-3.el9_2.1python3-unbound-debuginfo-1.16.2-3.el9_2.1.i686.rpm
RedHat9s390xunbound-libs< 1.16.2-3.el9_2.1unbound-libs-1.16.2-3.el9_2.1.s390x.rpm
RedHat9aarch64unbound-libs-debuginfo< 1.16.2-3.el9_2.1unbound-libs-debuginfo-1.16.2-3.el9_2.1.aarch64.rpm
RedHat9s390xunbound-libs-debuginfo< 1.16.2-3.el9_2.1unbound-libs-debuginfo-1.16.2-3.el9_2.1.s390x.rpm
RedHat9aarch64unbound-debugsource< 1.16.2-3.el9_2.1unbound-debugsource-1.16.2-3.el9_2.1.aarch64.rpm
RedHat9aarch64unbound-devel< 1.16.2-3.el9_2.1unbound-devel-1.16.2-3.el9_2.1.aarch64.rpm
RedHat9x86_64unbound< 1.16.2-3.el9_2.1unbound-1.16.2-3.el9_2.1.x86_64.rpm
RedHat9x86_64unbound-libs-debuginfo< 1.16.2-3.el9_2.1unbound-libs-debuginfo-1.16.2-3.el9_2.1.x86_64.rpm
RedHat9ppc64leunbound-libs-debuginfo< 1.16.2-3.el9_2.1unbound-libs-debuginfo-1.16.2-3.el9_2.1.ppc64le.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	9	x86_64	unbound-debuginfo	< 1.16.2-3.el9_2.1	unbound-debuginfo-1.16.2-3.el9_2.1.x86_64.rpm
RedHat	9	i686	python3-unbound-debuginfo	< 1.16.2-3.el9_2.1	python3-unbound-debuginfo-1.16.2-3.el9_2.1.i686.rpm
RedHat	9	s390x	unbound-libs	< 1.16.2-3.el9_2.1	unbound-libs-1.16.2-3.el9_2.1.s390x.rpm
RedHat	9	aarch64	unbound-libs-debuginfo	< 1.16.2-3.el9_2.1	unbound-libs-debuginfo-1.16.2-3.el9_2.1.aarch64.rpm
RedHat	9	s390x	unbound-libs-debuginfo	< 1.16.2-3.el9_2.1	unbound-libs-debuginfo-1.16.2-3.el9_2.1.s390x.rpm
RedHat	9	aarch64	unbound-debugsource	< 1.16.2-3.el9_2.1	unbound-debugsource-1.16.2-3.el9_2.1.aarch64.rpm
RedHat	9	aarch64	unbound-devel	< 1.16.2-3.el9_2.1	unbound-devel-1.16.2-3.el9_2.1.aarch64.rpm
RedHat	9	x86_64	unbound	< 1.16.2-3.el9_2.1	unbound-1.16.2-3.el9_2.1.x86_64.rpm
RedHat	9	x86_64	unbound-libs-debuginfo	< 1.16.2-3.el9_2.1	unbound-libs-debuginfo-1.16.2-3.el9_2.1.x86_64.rpm
RedHat	9	ppc64le	unbound-libs-debuginfo	< 1.16.2-3.el9_2.1	unbound-libs-debuginfo-1.16.2-3.el9_2.1.ppc64le.rpm