Alerts This Week
Warning Icon 1 646
Alerts This Week
Warning Icon 1 646

openSUSE Leap 15.4: 2022:0176-1 Important Unbound Integer Overflow

opensuse
Calendar Grey January 25, 2022
Dist Opensuse Esm H88
Essential security patch for unbound on openSUSE tackling several vulnerabilities. Safeguard your system's integrity.
An update that solves 13 vulnerabilities and has three fixes is now available

Description

This update for unbound fixes the following issues:

- CVE-2019-25031: Fixed configuration injection in

create_unbound_ad_servers.sh upon a successful man-in-the-middle attack

(bsc#1185382).

- CVE-2019-25032: Fixed integer overflow in the regional allocator via

regional_alloc (bsc#1185383).

- CVE-2019-25033: Fixed integer overflow in the regional allocator via the

ALIGN_UP macro (bsc#1185384).

- CVE-2019-25034: Fixed integer overflow in

sldns_str2wire_dname_buf_origin, leading to an out-of-bounds write

(bsc#1185385).

- CVE-2019-25035: Fixed out-of-bounds write in sldns_bget_token_par

(bsc#1185386).

- CVE-2019-25036: Fixed assertion failure and denial of service in

synth_cname (bsc#1185387).

- CVE-2019-25037: Fixed assertion failure and denial of service in

dname_pkt_copy via an invalid packet (bsc#1185388).

- CVE-2019-25038: Fixed integer overflow in a size calculation in

dnscrypt/dnscrypt.c (bsc#1185389).

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update integer overflow Denial of Service important fix openSUSE unbound

Patch

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods

like YaST online_update or "zypper patch".

Alternatively you can run the command listed for your product:

- openSUSE Leap 15.4:

zypper in -t patch openSUSE-SLE-15.4-2022-176=1

- openSUSE Leap 15.3:

zypper in -t patch openSUSE-SLE-15.3-2022-176=1

Package List

- openSUSE Leap 15.4 (aarch64 ppc64le s390x x86_64):

libunbound2-1.6.8-10.6.1

libunbound2-debuginfo-1.6.8-10.6.1

unbound-1.6.8-10.6.1

unbound-anchor-1.6.8-10.6.1

unbound-anchor-debuginfo-1.6.8-10.6.1

unbound-debuginfo-1.6.8-10.6.1

unbound-debugsource-1.6.8-10.6.1

unbound-devel-1.6.8-10.6.1

unbound-python-1.6.8-10.6.1

unbound-python-debuginfo-1.6.8-10.6.1

- openSUSE Leap 15.4 (noarch):

unbound-munin-1.6.8-10.6.1

- openSUSE Leap 15.3 (aarch64 ppc64le s390x x86_64):

libunbound2-1.6.8-10.6.1

libunbound2-debuginfo-1.6.8-10.6.1

unbound-1.6.8-10.6.1

unbound-anchor-1.6.8-10.6.1

unbound-anchor-debuginfo-1.6.8-10.6.1

unbound-debuginfo-1.6.8-10.6.1

unbound-debugsource-1.6.8-10.6.1

unbound-devel-1.6.8-10.6.1

unbound-python-1.6.8-10.6.1

unbound-python-debuginfo-1.6.8-10.6.1

- openSUSE Leap 15.3 (noarch):

unbound-munin-1.6.8-10.6.1

References

https://www.suse.com/security/cve/CVE-2019-25031.html

https://www.suse.com/security/cve/CVE-2019-25032.html

https://www.suse.com/security/cve/CVE-2019-25033.html

https://www.suse.com/security/cve/CVE-2019-25034.html

https://www.suse.com/security/cve/CVE-2019-25035.html

https://www.suse.com/security/cve/CVE-2019-25036.html

https://www.suse.com/security/cve/CVE-2019-25037.html

https://www.suse.com/security/cve/CVE-2019-25038.html

https://www.suse.com/security/cve/CVE-2019-25039.html

https://www.suse.com/security/cve/CVE-2019-25040.html

https://www.suse.com/security/cve/CVE-2019-25041.html

https://www.suse.com/security/cve/CVE-2019-25042.html

https://www.suse.com/security/cve/CVE-2020-28935.html

https://bugzilla.suse.com/1076963

https://bugzilla.suse.com/1112009

https://bugzilla.suse.com/1112033

https://bugzilla.suse.com/1179191

https://bugzilla.suse.com/1185382

https://bugzilla.suse.com/1185383

https://bugzilla.suse.com/1185384

https://bugzilla.suse.com/1185385

https://bugzilla.suse.com/1185386

https://bugzil...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2022:0176-1
Rating: important
Affected Products: openSUSE Leap 15.4 openSUSE Leap 15.3 ble.

Topics%20covered

Topics Covered

security advisory security update integer overflow Denial of Service important fix openSUSE unbound

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here