------------------------------------------------------------------------- Debian LTS Advisory DLA-2652-1 debian-lts@lists.debian.org https://www.debian.org/lts/security/ Markus Koschany May 06, 2021 https://wiki.debian.org/LTS ------------------------------------------------------------------------- Package : unbound1.9 Version : 1.9.0-2+deb10u2~deb9u2 CVE ID : CVE-2019-25031 CVE-2019-25032 CVE-2019-25033 CVE-2019-25034 CVE-2019-25035 CVE-2019-25036 CVE-2019-25037 CVE-2019-25038 CVE-2019-25039 CVE-2019-25040 CVE-2019-25041 CVE-2019-25042 Several security vulnerabilities have been discovered in Unbound, a validating, recursive, caching DNS resolver, by security researchers of X41 D-SEC located in Aachen, Germany. Integer overflows, assertion failures, an out-of-bound write and an infinite loop vulnerability may lead to a denial-of-service or have a negative impact on data confidentiality. For Debian 9 stretch, these problems have been fixed in version 1.9.0-2+deb10u2~deb9u2. We recommend that you upgrade your unbound1.9 packages. For the detailed security status of unbound1.9 please refer to its security tracker page at: https://security-tracker.debian.org/tracker/unbound1.9 Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS
Attachment:
signature.asc
Description: This is a digitally signed message part