[ubuntu/noble-updates] unbound 1.19.2-1ubuntu3.2 (Accepted)

[Ubuntu Archive Robot]

unbound (1.19.2-1ubuntu3.2) noble-security; urgency=medium

  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2024-43167-1.patch: fix null pointer
      dereference issue in function ub_ctx_set_fwd of file
      libunbound/libunbound.c
    - debian/patches/CVE-2024-43167-2.patch: fix to print a parse
      error when config is read with no name for a forward-zone, stub-
      zone or view.
    - CVE-2024-43167
  * SECURITY UPDATE: heap buffer overflow
    - debian/patches/CVE-2024-43168-1.patch: fix heap-buffer-overflow
      issue in function cfg_mark_ports of file util/config_file.c
    - debian/patches/CVE-2024-43168-2.patch: adjust error text and 
      disallow negative ports in other parts of cfg_mark_ports.
    - CVE-2024-43168

Date: 2024-09-09 03:14:09.438402+00:00
Changed-By: Bruce Cable <bruce.cable at canonical.com>
Signed-By: Ubuntu Archive Robot <ubuntu-archive-robot at lists.canonical.com>
https://launchpad.net/ubuntu/+source/unbound/1.19.2-1ubuntu3.2
-------------- next part --------------
Sorry, changesfile not available.