Package "unbound"
| Name: |
unbound
|
Description: |
This package is just an umbrella for a group of other packages,
it has no description.
Description samples from packages in group:
- static library, header files, and docs for libunbound
- library implementing DNS resolution and validation
|
| Latest version: |
1.19.2-1ubuntu3.12 |
| Release: |
noble (24.04) |
| Level: |
updates |
| Repository: |
main |
Links
Other versions of "unbound" in Noble
Packages in group
Deleted packages are displayed in grey.
Changelog
|
unbound (1.19.2-1ubuntu3.12) noble-security; urgency=medium
* SECURITY UPDATE: Allocation of Resources Without Limits
- debian/patches/CVE-2026-80225.patch: cap reads per event loop turn
in util/netevent.c and services/listen_dnsport.c, deferring the rest
with a zero-delay timer.
- CVE-2026-80225
* SECURITY UPDATE: Heap Buffer Overflow
- debian/patches/CVE-2026-50252.patch: replace the per-worker outgoing
port arrays with one shared per-interface port structure in daemon,
worker, libunbound and outside_network.
- CVE-2026-50252
* SECURITY UPDATE: Out-of-bounds Write
- debian/patches/CVE-2026-44690.patch: add a lower-bound check on the
RRSIG label count, move the cache write after validation and add a
bailiwick check on wildcard updates in validator/val_sigcrypt.c and
services/cache/rrset.c.
- CVE-2026-44690
* SECURITY UPDATE: Heap Buffer Overflow
- debian/patches/CVE-2026-40691.patch: bound the DNSCrypt reply length
against the buffer capacity in dnscrypt/dnscrypt.c and clamp the
TCP edns.udp_size.
- CVE-2026-40691
* SECURITY UPDATE: Allocation of Resources Without Limits
- debian/patches/CVE-2026-85501.patch: add MAX_TAG_MATCHES,
MAX_VALIDATE_NSECS, the val-validation-attempts and val-hash-attempts
limits, val_can_restart() and DS rrset scrubbing. The
val-clean-additional option now defaults to off.
- CVE-2026-85501
* SECURITY UPDATE: Heap Buffer Overflow
- debian/patches/CVE-2026-81634.patch: include the first owner name in
the buffer length check in rrset_canonicalize_to_buffer() in
validator/val_sigcrypt.c.
- CVE-2026-81634
-- Allen Huang Wed, 14 Oct 2026 22:26:11 +0100
|
| Source diff to previous version |
| CVE-2026-80225 |
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no |
| CVE-2026-50252 |
In NLnet Labs Unbound 1.4.22 up to and including 1.25.1, UDP source port is randomized and intended to serve as a secret value that increases the ent |
| CVE-2026-44690 |
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, insufficient validation of the RRSIG.Labels field combined with premature cache writes during |
| CVE-2026-40691 |
In Unbound 1.9.0 up to and including 1.25.1, when a DNSCrypt query is received over TCP, the routine that encrypts the reply in place fails to bound |
| CVE-2026-85501 |
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of |
| CVE-2026-81634 |
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRS |
|
|
unbound (1.19.2-1ubuntu3.10) noble-security; urgency=medium
* SECURITY UPDATE: Arbitrary Code Execution
- debian/patches/CVE-2026-81642.patch: Add check for buffer size
- debian/patches/CVE-2026-82717.patch: Update buffer position on
failure
- CVE-2026-81642
- CVE-2026-82717
-- Bruce Cable Fri, 02 Oct 2026 13:34:30 +1000
|
| Source diff to previous version |
| CVE-2026-81642 |
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remot |
| CVE-2026-82717 |
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems a |
|
|
unbound (1.19.2-1ubuntu3.8) noble-security; urgency=medium
* SECURITY UPDATE: Packet of death with DNSCrypt (feasibility very low)
- debian/patches/CVE-2026-32792: validate len in dnscrypt/dnscrypt.c.
- CVE-2026-32792
* SECURITY UPDATE: Possible remote code execution during DNSSEC validation
- debian/patches/CVE-2026-33278.patch: save rrsets alloc by gen_dns_msg
in services/cache/dns.c, testdata/*, validator/val_nsec3.c.
- CVE-2026-33278
* SECURITY UPDATE: "Ghost domain name" variant
- debian/patches/CVE-2026-40622.patch: never let an NS overwrite extend
lifetime past the entry it replaces in services/cache/rrset.c.
- CVE-2026-40622
* SECURITY UPDATE: Parsing a long list of incoming EDNS options degrades
performance
- debian/patches/CVE-2026-41292.patch: limit parsed edns options in
util/data/msgparse.c.
- CVE-2026-41292
* SECURITY UPDATE: Jostle logic bypass degrades resolution performance
- debian/patches/CVE-2026-42534.patch: properly handle jostle aging in
services/mesh.c, services/mesh.h.
- CVE-2026-42534
* SECURITY UPDATE: Degradation of service with unbounded NSEC3 hash
calculations
- debian/patches/CVE-2026-42923.patch: limit salt length in
validator/val_neg.c, validator/val_nsec3.c, validator/val_nsec3.h.
- CVE-2026-42923
* SECURITY UPDATE: Heap overflow and crash with multiple nsid, cookie,
padding EDNS options
- debian/patches/CVE-2026-42944.patch: use proper data sizes in
testcode/unitmain.c, util/data/msgencode.c, util/data/msgencode.h,
util/data/msgparse.c.
- CVE-2026-42944
* SECURITY UPDATE: Crash during DNSSEC validation of malicious content
- debian/patches/CVE-2026-42959.patch: fix calculations in
validator/val_utils.c.
- CVE-2026-42959
* SECURITY UPDATE: Possible cache poisoning attack while following
delegation
- debian/patches/CVE-2026-42960.patch: only mark glue as allowed for
type NS in the authority section in iterator/iter_scrub.c.
- CVE-2026-42960
* SECURITY UPDATE: Unbounded name compression in certain cases causes
degradation of service
- debian/patches/CVE-2026-44390.patch: fix counting in
util/data/msgencode.c.
- CVE-2026-44390
* SECURITY UPDATE: Use after free and crash in RPZ code
- debian/patches/CVE-2026-44608.patch: fix UaF in services/rpz.c.
- CVE-2026-44608
-- Marc Deslauriers <email address hidden> Mon, 18 May 2026 19:42:21 -0400
|
| Source diff to previous version |
| CVE-2026-32792 |
Packet of death with DNSCrypt (feasibility very low |
| CVE-2026-33278 |
Possible arbitrary code execution during DNSSEC validation |
| CVE-2026-40622 |
"Ghost domain name" variant |
| CVE-2026-41292 |
Parsing a long list of incoming EDNS options degrades performance |
| CVE-2026-42534 |
Jostle logic bypass degrades resolution performance |
| CVE-2026-42923 |
Degradation of service with unbounded NSEC3 hash calculations |
| CVE-2026-42944 |
Heap overflow and crash with multiple nsid, cookie, padding EDNS options |
| CVE-2026-42959 |
Crash during DNSSEC validation of malicious content |
| CVE-2026-42960 |
Possible cache poisoning attack while following delegation |
| CVE-2026-44390 |
Unbounded name compression in certain cases causes degradation of service |
| CVE-2026-44608 |
Use after free and crash in RPZ code (special requirements apply) |
|
|
unbound (1.19.2-1ubuntu3.7) noble-security; urgency=medium
* SECURITY REGRESSION: Incomplete fix for CVE-2025-11411.
- debian/patches/CVE-2025-11411-fix1.patch: Add mitigations for YXDOMAIN in
iterator/iter_scrub.c. Add tests in testdata/iter_scrub_promiscuous.rpl
and testdata/ratelimit.tdir/ratelimit.testns.
- CVE-2025-11411
-- Hlib Korzhynskyy <email address hidden> Mon, 01 Dec 2025 14:03:30 -0330
|
| CVE-2025-11411 |
NLnet Labs Unbound up to and including version 1.24.0 is vulnerable to possible domain hijack attacks. Promiscuous NS RRSets that complement positive |
|
About
-
Send Feedback to @ubuntu_updates
