unbound-1.4.20-29.AXS4.1

エラータID: AXSA:2020-179:03

Release date: 
Wednesday, June 24, 2020 - 02:54
Subject: 
unbound-1.4.20-29.AXS4.1
Affected Channels: 
Asianux Server 4 for x86_64
Asianux Server 4 for x86
Severity: 
High
Description: 

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

* unbound: amplification of an incoming query into a large number of queries directed to a target (CVE-2020-12662)

* unbound: infinite loop via malformed DNS answers received from upstream servers (CVE-2020-12663)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
CVE-2020-12663
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.

Solution: 

Update packages.

CVEs: 
CVE-2020-12662
Unbound before 1.10.1 has Insufficient Control of Network Message Volume, aka an "NXNSAttack" issue. This is triggered by random subdomains in the NSDNAME in NS records.
CVE-2020-12663
Unbound before 1.10.1 has an infinite loop via malformed DNS answers received from upstream servers.
Additional Info: 

N/A

Download: 

SRPMS
  1. unbound-1.4.20-29.AXS4.1.src.rpm
    MD5: 88f5be20c070dde4e380d8757253721a
    SHA-256: 400252ca641f46f5f3e962d44aa0790fd23620af772bdef03841aa81b45d8093
    Size: 3.51 MB

Asianux Server 4 for x86
  1. unbound-1.4.20-29.AXS4.1.i686.rpm
    MD5: 035c3ad56d6e482115435d8c03700d10
    SHA-256: e93d20a93bb77ed02bddd1a24532e0892e5a84069d0e0698a22950a150ccd05a
    Size: 1.07 MB
  2. unbound-libs-1.4.20-29.AXS4.1.i686.rpm
    MD5: ccdc31ce355d0b2f538e8761a8d58f68
    SHA-256: e96c2c9cf4f76f9d252992dcfc632cc8d1ee1c529011637cf282d79e400d3cdb
    Size: 306.70 kB

Asianux Server 4 for x86_64
  1. unbound-1.4.20-29.AXS4.1.x86_64.rpm
    MD5: aedb7ee2c713a8f76550079e8b80fdc0
    SHA-256: e8af085a5c1c3b6ef184f72ab55ce812ce8ea86615377e67dc9902d5a829d3f8
    Size: 1.05 MB
  2. unbound-libs-1.4.20-29.AXS4.1.x86_64.rpm
    MD5: 70ff5019b4a009614edc57ae48d3dbbe
    SHA-256: bf5d3752a0741e058c840ce42e70a843459993c26c870476b8998863f2a829bc
    Size: 305.22 kB
  3. unbound-libs-1.4.20-29.AXS4.1.i686.rpm
    MD5: ccdc31ce355d0b2f538e8761a8d58f68
    SHA-256: e96c2c9cf4f76f9d252992dcfc632cc8d1ee1c529011637cf282d79e400d3cdb
    Size: 306.70 kB