Red Hat Product Errata RHSA-2020:2418 - Security Advisory
Issued:
2020-06-08
Updated:
2020-06-08

RHSA-2020:2418 - Security Advisory

Synopsis

Important: unbound security update

Type/Severity

Security Advisory: Important

Red Hat Lightspeed patch analysis

Identify and remediate systems affected by this advisory.

View affected systems

Topic

An update for unbound is now available for Red Hat Enterprise Linux 8.0 Update Services for SAP Solutions.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Description

The unbound packages provide a validating, recursive, and caching DNS or DNSSEC resolver.

Security Fix(es):

  • unbound: amplification of an incoming query into a large number of queries directed to a target (CVE-2020-12662)
  • unbound: infinite loop via malformed DNS answers received from upstream servers (CVE-2020-12663)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Solution

For details on how to apply this update, which includes the changes described in this advisory, refer to:

https://access.redhat.com/articles/11258

Affected Products

  • Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.0 ppc64le
  • Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.0 x86_64

Fixes

  • BZ - 1837597 - CVE-2020-12662 unbound: amplification of an incoming query into a large number of queries directed to a target
  • BZ - 1837604 - CVE-2020-12663 unbound: infinite loop via malformed DNS answers received from upstream servers

Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 8.0

SRPM
unbound-1.7.3-9.el8_0.src.rpm SHA-256: 3f4ced231e890190381570861f6b8649efc2e38425518472cca40f48abeccacf
ppc64le
python3-unbound-1.7.3-9.el8_0.ppc64le.rpm SHA-256: a2cbe436e04019064a5a723a5868024c1a8a87d2d878544f4819c5a637bb361e
python3-unbound-debuginfo-1.7.3-9.el8_0.ppc64le.rpm SHA-256: f21e49af538b4d51d1a6b9a02270df41517035635f5fc043d2320425e803fe91
unbound-1.7.3-9.el8_0.ppc64le.rpm SHA-256: fb96fc75d21673cfbae9aa5f544552d7e0343f9f0d1004ec3b0354241f00c830
unbound-debuginfo-1.7.3-9.el8_0.ppc64le.rpm SHA-256: 2cb3adf3ba0a3ba2ba24cd1381e9df65ec6fe106001cee3d6c2a36385ac45ae3
unbound-debugsource-1.7.3-9.el8_0.ppc64le.rpm SHA-256: 50b266aeba42265ff1f602cb013020d474045981fd92e8dc950d8a9ed5c2e493
unbound-devel-1.7.3-9.el8_0.ppc64le.rpm SHA-256: ee435e6a9906a6aeaac94838226094d8dfaba44289f542a606c5ec3e3ace2779
unbound-libs-1.7.3-9.el8_0.ppc64le.rpm SHA-256: 5b86ace752aaa3c7f3a61437d2caedb7f97db57d9b8565ded7b360ffe2762932
unbound-libs-debuginfo-1.7.3-9.el8_0.ppc64le.rpm SHA-256: 3561363e4f164399a23a37b277e94734eff2512b3e0e84c3edb5ab26d1c8b0a1

Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 8.0

SRPM
unbound-1.7.3-9.el8_0.src.rpm SHA-256: 3f4ced231e890190381570861f6b8649efc2e38425518472cca40f48abeccacf
x86_64
python3-unbound-1.7.3-9.el8_0.x86_64.rpm SHA-256: 9b7fb29148c13aa58c0eff13014f83dd2d10bf8245b90bf99d0deb0566c53a32
python3-unbound-debuginfo-1.7.3-9.el8_0.i686.rpm SHA-256: 9570fd545f4c0a41c12b61dadbc571c18a77c845e7ac4e8282380500774a02b0
python3-unbound-debuginfo-1.7.3-9.el8_0.x86_64.rpm SHA-256: 2219804762bacfeefbb6289a5c0ded332cfe7a3bf4ab263c2215ab19a047980c
unbound-1.7.3-9.el8_0.x86_64.rpm SHA-256: 29d9b9bc7024fdff6538f7105cb096b7e12fb7a2bfaee50755b9ef86440a8edb
unbound-debuginfo-1.7.3-9.el8_0.i686.rpm SHA-256: cf1206bf3b9ebb395df7e6677493ef178b288092e0749cc5aeec00277d2c329f
unbound-debuginfo-1.7.3-9.el8_0.x86_64.rpm SHA-256: 21c7a56f75a1c4ed173c7fe4ef9e77a2e24b9e7feb3b3ebf317daf5e1d29b75b
unbound-debugsource-1.7.3-9.el8_0.i686.rpm SHA-256: 09ea33dd1bbd4db8f6e42857b385c5c5827099e8b465bfd84350ff463ed7e2b3
unbound-debugsource-1.7.3-9.el8_0.x86_64.rpm SHA-256: 89a4ec10f3bae137593498040a3c26a53b0b76199aab87765ae382f72741b18d
unbound-devel-1.7.3-9.el8_0.i686.rpm SHA-256: a47d31d85023b1ecddf3b7f44c2e2227a206d44ffe359a59f8a812dc78590b3b
unbound-devel-1.7.3-9.el8_0.x86_64.rpm SHA-256: 9b485552f3da3ccab4da63f6e02e41e16aa2928c5a68f185a0c0de9106548d69
unbound-libs-1.7.3-9.el8_0.i686.rpm SHA-256: fdf1b127d81ee2e897508749b96a4b8e389ea0aa9fdb8d54d7134a42db674bcb
unbound-libs-1.7.3-9.el8_0.x86_64.rpm SHA-256: 5dc0f33913e3c58bfb9d02b8d03115ede14850e19b00a50218d5f6fc66baad04
unbound-libs-debuginfo-1.7.3-9.el8_0.i686.rpm SHA-256: bbcb01446f3689cbfc81d600b0332175c52876078f9adb8d7a0e0fdacc99ec7e
unbound-libs-debuginfo-1.7.3-9.el8_0.x86_64.rpm SHA-256: 0abe17970b02906a00955226a50a1242a7c798e28088cd27cd551969b2c9c88e

The Red Hat security contact is secalert@redhat.com. More contact details at https://access.redhat.com/security/team/contact/.