UbuntuUpdates.org

Package "dnsutils"

Name: dnsutils

Description:

Transitional package for bind9-dnsutils
Latest version: 1:9.20.0-2ubuntu3.1
Release: oracular (24.10)
Level: security
Repository: universe
Head package: bind9
Homepage: https://www.isc.org/downloads/bind/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "dnsutils"

All arch deb package
APT INSTALL

Other versions of "dnsutils" in Oracular

Repository Area Version
base universe 1:9.20.0-2ubuntu3
updates universe 1:9.20.0-2ubuntu3.1

Changelog

Version: 1:9.20.0-2ubuntu3.1 2025-01-29 20:07:04 UTC

  bind9 (1:9.20.0-2ubuntu3.1) oracular-security; urgency=medium

  * SECURITY UPDATE: Many records in the additional section cause CPU
    exhaustion
    - debian/patches/CVE-2024-11187.patch: limit the additional processing
      for large RDATA sets in bin/tests/*, lib/dns/include/dns/rdataset.h,
      lib/dns/qpzone.c, lib/dns/rbt-zonedb.c, lib/dns/rdataset.c,
      lib/dns/resolver.c, lib/ns/query.c.
    - CVE-2024-11187
  * SECURITY UPDATE: DNS-over-HTTPS implementation suffers from multiple
    issues under heavy query load
    - debian/patches/CVE-2024-12705.patch: fix flooding issues in
      lib/isc/netmgr/http.c, lib/isc/netmgr/netmgr-int.h,
      lib/isc/netmgr/proxystream.c, lib/isc/netmgr/streamdns.c,
      lib/isc/netmgr/tcp.c, lib/isc/netmgr/tlsstream.c,
    - CVE-2024-12705

 -- Marc Deslauriers <email address hidden> Tue, 28 Jan 2025 09:18:29 -0500
CVE-2024-11187 Many records in the additional section cause CPU exhaustion
CVE-2024-12705 DNS-over-HTTPS implementation suffers from multiple issues under heavy query load


About   -   Send Feedback to @ubuntu_updates