[ubuntu/oracular-proposed] unbound 1.20.0-1ubuntu2 (Accepted)

Bruce Cable bruce.cable at canonical.com
Wed Sep 11 21:10:14 UTC 2024


unbound (1.20.0-1ubuntu2) oracular; urgency=medium

  * SECURITY UPDATE: null pointer dereference
    - debian/patches/CVE-2024-43167-1.patch: fix null pointer
      dereference issue in function ub_ctx_set_fwd of file
      libunbound/libunbound.c
    - debian/patches/CVE-2024-43167-2.patch: fix to print a parse
      error when config is read with no name for a forward-zone, stub-
      zone or view.
    - CVE-2024-43167

Date: Mon, 09 Sep 2024 10:48:56 +1000
Changed-By: Bruce Cable <bruce.cable at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Alex Murray <alex.murray at canonical.com>
https://launchpad.net/ubuntu/+source/unbound/1.20.0-1ubuntu2
-------------- next part --------------
Format: 1.8
Date: Mon, 09 Sep 2024 10:48:56 +1000
Source: unbound
Built-For-Profiles: noudeb
Architecture: source
Version: 1.20.0-1ubuntu2
Distribution: oracular
Urgency: medium
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Bruce Cable <bruce.cable at canonical.com>
Changes:
 unbound (1.20.0-1ubuntu2) oracular; urgency=medium
 .
   * SECURITY UPDATE: null pointer dereference
     - debian/patches/CVE-2024-43167-1.patch: fix null pointer
       dereference issue in function ub_ctx_set_fwd of file
       libunbound/libunbound.c
     - debian/patches/CVE-2024-43167-2.patch: fix to print a parse
       error when config is read with no name for a forward-zone, stub-
       zone or view.
     - CVE-2024-43167
Checksums-Sha1:
 41a6d202e9fd98e1c2622efec01406f13b7a73ce 2729 unbound_1.20.0-1ubuntu2.dsc
 d628c0d835212082ec503ec1b9b07ea8e0c3ec2e 30972 unbound_1.20.0-1ubuntu2.debian.tar.xz
 1e1e0745541bfe66e1ce007c71453c6161c628f3 8188 unbound_1.20.0-1ubuntu2_source.buildinfo
Checksums-Sha256:
 83ec4f2b103f00dcceb59d57782ce9c0a3b1c674a58a64521a79e888409af9c5 2729 unbound_1.20.0-1ubuntu2.dsc
 c120e35005a08beebdfad584a6784a333aea92d92481fe2eee4483516c7cb50f 30972 unbound_1.20.0-1ubuntu2.debian.tar.xz
 c829b969f2a2d48df513d01597943fcf4d0c1948f190919f6e2063dfabd46637 8188 unbound_1.20.0-1ubuntu2_source.buildinfo
Files:
 18ac2dca9211af499337e983916fcecf 2729 net optional unbound_1.20.0-1ubuntu2.dsc
 f96c7bbffff2da1106d2512574af34e0 30972 net optional unbound_1.20.0-1ubuntu2.debian.tar.xz
 3eae30bc538a2dc63230f74e45af0286 8188 net optional unbound_1.20.0-1ubuntu2_source.buildinfo
Original-Maintainer: unbound packagers <unbound at packages.debian.org>


More information about the oracular-changes mailing list