rpms/unbound
7
0
Fork 0
Code Issues Pull Requests Releases Activity

Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387

Browse Source 
Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868

; Resolves: CVE-2023-50868 CVE-2023-50387
Resolves: RHEL-25671 RHEL-25643
This commit is contained in:
Tomas Korbar 2024-02-16 12:38:25 +01:00 committed by Petr Menšík
parent ec526e1830
commit 74bca6df28
2 changed files with 2313 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2304
unbound-1.16-CVE-2023-50387-CVE-2023-50868.patch Normal file
View File

File diff suppressed because it is too large Load Diff

10
unbound.spec
View File

@ -30,7 +30,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound Name: unbound
Version: 1.16.2 Version: 1.16.2
Release: 3%{?extra_version:.%{extra_version}}%{?dist} Release: 6%{?extra_version:.%{extra_version}}%{?dist}
License: BSD License: BSD
Url: https://nlnetlabs.nl/projects/unbound/ Url: https://nlnetlabs.nl/projects/unbound/
Source: https://nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?extra_version}.tar.gz Source: https://nlnetlabs.nl/downloads/%{name}/%{name}-%{version}%{?extra_version}.tar.gz
@ -55,6 +55,8 @@ Source19: http://keys.gnupg.net/pks/lookup?op=get&search=0x9F6F1C2D7E045F8D#/wou
# https://github.com/NLnetLabs/unbound/commit/137719522a8ea5b380fbb6206d2466f402f5b554 # https://github.com/NLnetLabs/unbound/commit/137719522a8ea5b380fbb6206d2466f402f5b554
Patch1: unbound-1.16-CVE-2022-3204.patch Patch1: unbound-1.16-CVE-2022-3204.patch
# https://nlnetlabs.nl/downloads/unbound/patch_CVE-2023-50387_CVE-2023-50868.diff
Patch4: unbound-1.16-CVE-2023-50387-CVE-2023-50868.patch
BuildRequires: gcc, make BuildRequires: gcc, make
BuildRequires: flex, openssl-devel BuildRequires: flex, openssl-devel
@ -449,6 +451,12 @@ popd
%attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key %attr(0644,root,root) %config %{_sysconfdir}/%{name}/root.key
%changelog %changelog
* Fri Feb 16 2024 Tomas Korbar <tkorbar@redhat.com> - 1.16.2-6
- Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
- Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
- Resolves: RHEL-25671
- Resolves: RHEL-25643
* Tue Oct 11 2022 Petr Menšík <pemensik@redhat.com> - 1.16.2-3 * Tue Oct 11 2022 Petr Menšík <pemensik@redhat.com> - 1.16.2-3
- Fix NRDelegation attack leading to uncontrolled resource consumption - Fix NRDelegation attack leading to uncontrolled resource consumption
(CVE-2022-3204) (CVE-2022-3204)