SUSE Package Hub - SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3647

Update Info

SUSE-SLE-Module-Packagehub-Subpackages-15-SP6-2024-3647

Security update for unbound

Type: security

Severity: moderate

Issued: 2024-10-16

Description:

This update for unbound fixes the following issues:

- CVE-2024-8508: Fixed unbounded name compression that could lead to denial of service (bsc#1231284)

References

CVE: CVE-2024-8508
Bugzilla: 1231284 VUL-0: CVE-2024-8508: unbound: handling of upstream responses with very large RRsets and where name compression is needed for downstream replies leads to degraded performance and, eventually, denial of service

Packages

unbound-1.20.0-150600.23.9.1