logo
DATABASE RESOURCES PRICING ABOUT US

Security update for unbound (important)

Description

An update that fixes three vulnerabilities is now available. Description: This update for unbound fixes the following issues: - CVE-2020-12662: Fixed an issue where unbound could have been tricked into amplifying an incoming query into a large number of queries directed to a target (bsc#1171889). - CVE-2020-12663: Fixed an issue where malformed answers from upstream name servers could have been used to make unbound unresponsive (bsc#1171889). - CVE-2019-18934: Fixed a vulnerability in the IPSec module which could have allowed code execution after receiving a special crafted answer (bsc#1157268). This update was imported from the SUSE:SLE-15-SP1:Update update project. Patch Instructions: To install this openSUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap 15.2: zypper in -t patch openSUSE-2020-913=1


Affected Package


OS OS Version Package Name Package Version
openSUSE Leap 15.2 - openSUSE Leap 15.2 (i586 x86_64):
openSUSE Leap 15.2 - openSUSE Leap 15.2 (i586 x86_64):
openSUSE Leap 15.2 - openSUSE Leap 15.2 (noarch):
openSUSE Leap 15.2 - openSUSE Leap 15.2 (x86_64):

Related