]> git.ipfire.org Git - thirdparty/unbound.git/tag
release-1.16.3
object 137719522a8ea5b380fbb6206d2466f402f5b554
authorW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Wed, 21 Sep 2022 10:07:15 +0000 (12:07 +0200)
Unbound 1.16.3

This release fixes CVE-2022-3204 Non-Responsive Delegation
Attack. It was reported by Yehuda Afek from Tel-Aviv
University and Anat Bremler-Barr and Shani Stajnrod from
Reichman University.

This fixes for better performance when under load, by cutting
promiscuous queries for nameserver discovery and limiting the
number of times a delegation point can look in the cache for
missing records.

Bug Fixes
- Patch for CVE-2022-3204 Non-Responsive Delegation Attack.
-----BEGIN PGP SIGNATURE-----

iQJIBAABCAAyFiEE7fqj8spObrBWga+On28cLX4EX40FAmMq4osUHHdvdXRlckBu
bG5ldGxhYnMubmwACgkQn28cLX4EX43bbg//Qp+Qqs0gu/nD2ZHjVgXxrtPvcBq1
3+7A7nszcU1cSVyxLbzbkGX7yFNtTtBSgsZXi9RUo+pGq6qO6TJxko7yakVLwUyY
kII85SDvz3jiSOQ0W9CebyamiCOx/t4a0wq0iiO3JyIlY84O5TFAsXsavlJBpM90
ls+kri47Cu0u4+UpSPbSZX4AeZaxwaU8TyxDwI6L6jPTifFPJLPZ8Vv2N4DdNmPr
iTYKb6/NkBeZg23zqB06sY1s+X9lc3FvpuM1USHtCBxcDMb0f2x6iv0by0MJCc8q
CIE47ZixNPu+0y3BxqAEo+gouxLjpnAWAqpm27i7kVPDQ/91+bRd6t7bpRWWju/4
rKhTvn1URicLPGLcULPl+CZ84s8TJoLMiaWtOwHc9z6d99ffRzLrlVV+A1TJLogR
nj02JA4mKdC3lJsbGh+xpNhLkNKVBFbIeA+m2D2gNk0gMHSLB3aQF/wseiWfhzSe
FdK5BHG8K80WInegYZY0kEU042qRwmwsInUzixtMOaz6z+MMhSyXDJunhuMQ2v9N
cwcrJ/8wvmFLkhHLLuTW3Fa7DMX6CHMVlKC7EXS5X5FyPGmQQSmzYlJERg/YF1+H
XqrMNLjaPRfzYmQqDPMrUFLf8i+iCUJlQ1V3Om6lK1h81fsj/I1R/Buz+pmX+FO+
Pj9MzhJ15kuaZKI=
=V7Ea
-----END PGP SIGNATURE-----