Summary
[1.16.2-2]
- Require openssl tool for unbound-keygen (#2018806)
[1.16.2-1]
- Update to 1.16.2 (#2027735)
[1.16.0-2]
- Restart keygen service before every unbound start (#1959468)
[1.16.0-1]
- Upgrade to 9.16.0 (#2027735)
- Update to recent version with compatibility with RHEL8 (#2027735)
- Ensure also source level compatibility with previous version
[1.7.3-18]
- Change file mode before owner when configuring remote control unix socket to avoid AVC denials
- Resolves: rhbz#2038251
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 8 | python3-unbound | 0:1.16.2-2.el8 |
| Oracle Linux · 8 | unbound | 0:1.16.2-2.el8 |
| Oracle Linux · 8 | unbound-devel | 0:1.16.2-2.el8 |
| Oracle Linux · 8 | unbound-libs | 0:1.16.2-2.el8 |
Vulnerabilities 2
-
Unscored —
Novel "ghost domain names" attack by introducing subdomain delegations
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …
-
Unscored —
Novel "ghost domain names" attack by updating almost expired delegation information
NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…