Todo #15483
closed
Added by Glenn Hall 7 months ago.
Updated 26 days ago.
Plus Target Version:
24.11
Description
Update Unbound to version 1.20.0, as this newest version contains a fix for the DNSBomb vulnerability CVE-2024-33655.
- Priority changed from Normal-package to Normal
- Target version set to 2.8.0
- Plus Target Version set to 24.07
If you read the details that isn't really a vulnerability in Unbound and they only added/changed some default values to make it less of a tempting middleman for attackers. We're already working on updating it, but it's not as critical as if it were a flaw in Unbound itself.
- Plus Target Version changed from 24.07 to 24.08
- Subject changed from Update Unbound to 1.20.0 to Update Unbound to 1.20.1
- Subject changed from Update Unbound to 1.20.1 to Update Unbound to 1.21.1
- Status changed from New to Feedback
- % Done changed from 0 to 100
Latest snapshots contain unbound-1.21.1
- Plus Target Version changed from 24.08 to 24.11
- Status changed from Feedback to Resolved
Latest snapshots contain unbound-1.21.1 - confirmed
- Subject changed from Update Unbound to 1.21.1 to Update Unbound to 1.22.0
Also available in: Atom
PDF