Описание
ELSA-2025-0837: unbound security update (IMPORTANT)
[1.16.2-5.8]
- Prevent unbounded name compression (CVE-2024-8508)
[1.16.2-5.7]
- Rebuild to propagate to CentOS Stream (RHEL-25500)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
python3-unbound
1.16.2-5.8.el8_10
unbound
1.16.2-5.8.el8_10
unbound-devel
1.16.2-5.8.el8_10
unbound-libs
1.16.2-5.8.el8_10
Oracle Linux x86_64
python3-unbound
1.16.2-5.8.el8_10
unbound
1.16.2-5.8.el8_10
unbound-devel
1.16.2-5.8.el8_10
unbound-libs
1.16.2-5.8.el8_10
Связанные CVE
Связанные уязвимости
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
A vulnerability was found in Unbound due to incorrect default permissions, allowing any process outside the unbound group to modify the unbound runtime configuration. If a process can connect over localhost to port 8953, it can alter the configuration of unbound.service. This flaw allows an unprivileged attacker to manipulate a running instance, potentially altering forwarders, allowing them to track all queries forwarded by the local resolver, and, in some cases, disrupting resolving altogether.
A vulnerability was found in Unbound due to incorrect default permissi ...