Summary
[1.16.2-2]
- Require openssl tool for unbound-keygen (#2116802)
[1.16.2-1]
- Update to 1.16.2 (#2087120)
[1.16.0-3]
- Disable ED25519 and ED448 in FIPS mode (#2079548)
[1.16.0-2]
- Restart keygen service before every unbound start (#2094336)
[1.16.0-1]
- Update to 1.16.0 (#2087120)
[1.15.0-1]
- Update to 1.15.0 (#2030608)
- Update icannbundle.pem
[1.13.2-1]
- Resolves: rhbz#1992985 unbound-1.13.2 is available
- Use system-wide crypto policies
[1.13.1-15]
- Export unbound-devel to CRB repository (#2056116)
[1.13.1-14]
- Stop creating wrong devel manual pages (#2071943)
Fixed packages 4
| Release | Package | Fixed in |
|---|---|---|
| Oracle Linux · 9 | python3-unbound | 0:1.16.2-2.el9 |
| Oracle Linux · 9 | unbound | 0:1.16.2-2.el9 |
| Oracle Linux · 9 | unbound-devel | 0:1.16.2-2.el9 |
| Oracle Linux · 9 | unbound-libs | 0:1.16.2-2.el9 |
Vulnerabilities 2
-
Unscored —
Novel "ghost domain names" attack by introducing subdomain delegations
NLnet Labs Unbound, up to and including version 1.16.1 is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a subdomain of a rogue domain name. The rogue nameserver …
-
Unscored —
Novel "ghost domain names" attack by updating almost expired delegation information
NLnet Labs Unbound, up to and including version 1.16.1, is vulnerable to a novel type of the "ghost domain names" attack. The vulnerability works by targeting an Unbound instance. Unbound is queried for a rogue domain name when the cached delegation informati…