Publishing details

Removed from disk on 2022-08-17.
Removal requested on 2022-08-17.
Superseded on 2022-08-16 by unbound - 1.6.7-1ubuntu2.5
Published on 2021-05-06
Copied from ubuntu bionic in PPA for Ubuntu Security Proposed by Marc Deslauriers

Changelog

unbound (1.6.7-1ubuntu2.4) bionic-security; urgency=medium

  * SECURITY UPDATE: configuration injection via MITM
    - debian/patches/CVE-2019-25031.patch: use https, remove special
      characters in contrib/create_unbound_ad_servers.sh.
    - CVE-2019-25031
  * SECURITY UPDATE: integer overflows in the regional allocator
    - debian/patches/CVE-2019-25032.patch: fix overflows in config.h.in,
      configure, configure.ac, util/regional.c.
    - CVE-2019-25032
    - CVE-2019-25033
  * SECURITY UPDATE: integer overflow in sldns_str2wire_dname_buf_origin
    - debian/patches/CVE-2019-25034.patch: check lengths in
      sldns/str2wire.c.
    - CVE-2019-25034
  * SECURITY UPDATE: out-of-bounds write in sldns_bget_token_par
    - debian/patches/CVE-2019-25035.patch: check for space in
      sldns/parse.c.
    - CVE-2019-25035
  * SECURITY UPDATE: assertion failure and denial of service
    - debian/patches/CVE-2019-25036.patch: validate lengths in
      iterator/iter_scrub.c.
    - CVE-2019-25036
  * SECURITY UPDATE: assertion failure and denial of service
    - debian/patches/CVE-2019-25037.patch: validate length in
      util/data/dname.c.
    - CVE-2019-25037
  * SECURITY UPDATE: integer overflow in a size calculation
    - debian/patches/CVE-2019-25038.patch: check for overflows in
      dnscrypt/dnscrypt.c, respip/respip.c.
    - CVE-2019-25038
    - CVE-2019-25039
  * SECURITY UPDATE: infinite loop and assertion fail via compressed name
    - debian/patches/CVE-2019-25040.patch: validate compression pointers in
      util/data/dname.c.
    - CVE-2019-25040
    - CVE-2019-25041
  * SECURITY UPDATE: out-of-bounds write via a compressed name
    - debian/patches/CVE-2019-25042.patch: move assert in
      util/data/msgreply.c.
    - CVE-2019-25042
  * SECURITY UPDATE: incorrect PID file handling
    - debian/patches/CVE-2020-28935.patch: check for symlinks in
      daemon/unbound.c.
    - CVE-2020-28935
  * debian/patches: rename debian-changes to misc-changes.patch.

 -- Marc Deslauriers <email address hidden>  Wed, 05 May 2021 07:38:50 -0400

Available diffs

diff from 1.6.7-1ubuntu2.3 to 1.6.7-1ubuntu2.4 (8.6 KiB)

Builds

Package files

libunbound-dev_1.6.7-1ubuntu2.4_amd64.deb (5.4 MiB)
libunbound-dev_1.6.7-1ubuntu2.4_arm64.deb (328.1 KiB)
libunbound-dev_1.6.7-1ubuntu2.4_armhf.deb (328.3 KiB)
libunbound-dev_1.6.7-1ubuntu2.4_i386.deb (401.6 KiB)
libunbound-dev_1.6.7-1ubuntu2.4_ppc64el.deb (419.8 KiB)
libunbound-dev_1.6.7-1ubuntu2.4_s390x.deb (340.5 KiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (711.6 KiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (957.1 KiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (883.1 KiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (787.1 KiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (1.0 MiB)
libunbound2-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (950.1 KiB)
libunbound2_1.6.7-1ubuntu2.4_amd64.deb (261.0 KiB)
libunbound2_1.6.7-1ubuntu2.4_arm64.deb (247.3 KiB)
libunbound2_1.6.7-1ubuntu2.4_armhf.deb (253.3 KiB)
libunbound2_1.6.7-1ubuntu2.4_i386.deb (324.2 KiB)
libunbound2_1.6.7-1ubuntu2.4_ppc64el.deb (306.3 KiB)
libunbound2_1.6.7-1ubuntu2.4_s390x.deb (269.9 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (102.8 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (112.8 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (111.1 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (95.6 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (138.3 KiB)
python-unbound-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (118.1 KiB)
python-unbound_1.6.7-1ubuntu2.4_amd64.deb (50.4 KiB)
python-unbound_1.6.7-1ubuntu2.4_arm64.deb (45.2 KiB)
python-unbound_1.6.7-1ubuntu2.4_armhf.deb (44.7 KiB)
python-unbound_1.6.7-1ubuntu2.4_i386.deb (50.1 KiB)
python-unbound_1.6.7-1ubuntu2.4_ppc64el.deb (51.0 KiB)
python-unbound_1.6.7-1ubuntu2.4_s390x.deb (47.7 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (102.6 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (113.8 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (111.9 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (96.4 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (138.8 KiB)
python3-unbound-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (118.4 KiB)
python3-unbound_1.6.7-1ubuntu2.4_amd64.deb (50.4 KiB)
python3-unbound_1.6.7-1ubuntu2.4_arm64.deb (45.0 KiB)
python3-unbound_1.6.7-1ubuntu2.4_armhf.deb (44.8 KiB)
python3-unbound_1.6.7-1ubuntu2.4_i386.deb (49.9 KiB)
python3-unbound_1.6.7-1ubuntu2.4_ppc64el.deb (50.1 KiB)
python3-unbound_1.6.7-1ubuntu2.4_s390x.deb (47.4 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (42.5 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (58.4 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (56.6 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (53.3 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (60.6 KiB)
unbound-anchor-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (58.0 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_amd64.deb (24.4 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_arm64.deb (24.6 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_armhf.deb (26.0 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_i386.deb (29.7 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_ppc64el.deb (27.1 KiB)
unbound-anchor_1.6.7-1ubuntu2.4_s390x.deb (26.6 KiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (2.0 MiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (3.6 MiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (3.4 MiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (3.0 MiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (4.0 MiB)
unbound-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (3.6 MiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_amd64.ddeb (45.6 KiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_arm64.ddeb (106.8 KiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_armhf.ddeb (98.3 KiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_i386.ddeb (83.6 KiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_ppc64el.ddeb (120.1 KiB)
unbound-host-dbgsym_1.6.7-1ubuntu2.4_s390x.ddeb (107.9 KiB)
unbound-host_1.6.7-1ubuntu2.4_amd64.deb (24.2 KiB)
unbound-host_1.6.7-1ubuntu2.4_arm64.deb (36.8 KiB)
unbound-host_1.6.7-1ubuntu2.4_armhf.deb (35.5 KiB)
unbound-host_1.6.7-1ubuntu2.4_i386.deb (45.4 KiB)
unbound-host_1.6.7-1ubuntu2.4_ppc64el.deb (44.6 KiB)
unbound-host_1.6.7-1ubuntu2.4_s390x.deb (40.7 KiB)
unbound_1.6.7-1ubuntu2.4.debian.tar.xz (36.2 KiB)
unbound_1.6.7-1ubuntu2.4.dsc (3.1 KiB)
unbound_1.6.7-1ubuntu2.4_amd64.deb (566.1 KiB)
unbound_1.6.7-1ubuntu2.4_arm64.deb (487.3 KiB)
unbound_1.6.7-1ubuntu2.4_armhf.deb (491.5 KiB)
unbound_1.6.7-1ubuntu2.4_i386.deb (626.7 KiB)
unbound_1.6.7-1ubuntu2.4_ppc64el.deb (572.7 KiB)
unbound_1.6.7-1ubuntu2.4_s390x.deb (551.9 KiB)
unbound_1.6.7.orig.tar.gz (5.2 MiB)