Skip to content
OpenAdvisories
Low ELSA-2015-2455 1 CVE

Low: unbound security and bug fix update (Oracle Linux 7)

Published Nov 23, 2015 · Updated Nov 23, 2015

Summary

[1.4.20-26]
- Added Conficts on redhat-release packages without unbound-anchor.timer in presets (Related #1215645)

[1.4.20-25]
- Resolve ordering loop with nss-lookup.target and ntpdate (#1259806)

[1.4.20-24]
- Fix CVE-2014-8602 (#1253961)

[1.4.20-23]
- Removed usage of DLV from the default configuration (#1223339)

[1.4.20-22]
- unbound.service now Wants unbound-anchor.timer (Related: #1180267)

[1.4.20-21]
- Fix dependencies and minor scriptlet issues due to systemd timer unit (Related: #1180267)

[1.4.20-20]
- Install tmpfiles configuration into /usr/lib/tmpfiles.d (#1180995)
- Fix root key management to comply to RFC5011 (#1180267)

Fixed packages 4

ReleasePackageFixed in
Oracle Linux · 7 unbound 0:1.4.20-26.el7
Oracle Linux · 7 unbound-devel 0:1.4.20-26.el7
Oracle Linux · 7 unbound-libs 0:1.4.20-26.el7
Oracle Linux · 7 unbound-python 0:1.4.20-26.el7

Vulnerabilities 1

  • Unscored —
    CVE-2014-8602 EPSS 32%

    iterator.c in NLnet Labs Unbound before 1.5.1 does not limit delegation chaining, which allows remote attackers to caus…