NetCube-Systems-Austria/kumquat-buildroot
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

package/unbound: security bump version to 1.16.3

Browse Source 
Fixes the following security issue:

CVE-2022-3204: The NRDelegation Attack can exploit resolvers by having a
malicious delegation with a considerable number of non responsive
nameservers.  It can trigger high CPU usage in some resolver implementations
that continually look in the cache for resolved NS records in that
delegation.  This can lead to degraded performance and eventually denial of
service in orchestrated attacks.

Unbound does not suffer from high CPU usage, but resources are still needed
for resolving the malicious delegation.  Unbound 1.16.3 includes fixes for
better performance when under load.

https://www.nlnetlabs.nl/downloads/unbound/CVE-2022-3204.txt

Signed-off-by: Kyle Harding <kyle@balena.io>
Signed-off-by: Thomas Petazzoni <thomas.petazzoni@bootlin.com>
(cherry picked from commit 5560bc6c16)
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Kyle Harding 2022-09-21 17:47:54 -04:00 committed by Peter Korsgaard
parent 155388fde9
commit be394fbcd8
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
package/unbound/unbound.hash
View File

@ -1,5 +1,5 @@
# From https://nlnetlabs.nl/downloads/unbound/unbound-1.16.2.tar.gz.sha256
sha256 2e32f283820c24c51ca1dd8afecfdb747c7385a137abe865c99db4b257403581 unbound-1.16.2.tar.gz
# From https://nlnetlabs.nl/downloads/unbound/unbound-1.16.3.tar.gz.sha256
sha256 ea0c6665e2c3325b769eac1dfccd60fe1828d5fcf662650039eccb3f67edb28e unbound-1.16.3.tar.gz
# Locally calculated
sha256 8eb9a16cbfb8703090bbfa3a2028fd46bb351509a2f90dc1001e51fbe6fd45db LICENSE

2
package/unbound/unbound.mk
View File

@ -4,7 +4,7 @@
#
################################################################################
UNBOUND_VERSION = 1.16.2
UNBOUND_VERSION = 1.16.3
UNBOUND_SITE = https://www.unbound.net/downloads
UNBOUND_DEPENDENCIES = host-pkgconf expat libevent openssl
UNBOUND_LICENSE = BSD-3-Clause