Unbound 1.10.1 released

Wouter Wijngaards wouter at nlnetlabs.nl
Tue May 19 08:03:18 UTC 2020


Unbound 1.10.1 is available:
sha256 b73677c21a71cf92f15cc8cfe76a3d875e40f65b6150081c39620b286582d536
pgp https://nlnetlabs.nl/downloads/unbound/unbound-1.10.1.tar.gz.asc

This release fixes CVE-2020-12662 and CVE-2020-12663.

Bug Fixes:
- CVE-2020-12662 Unbound can be tricked into amplifying an incoming
  query into a large number of queries directed to a target.
- CVE-2020-12663 Malformed answers from upstream name servers can be
  used to make Unbound unresponsive.

Best regards, Wouter

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20200519/a8bb736a/attachment.bin>

More information about the Unbound-users mailing list