USN-4938-1: Unbound vulnerabilities

Releases

• Ubuntu 20.04 LTS
• Ubuntu 18.04 ESM

Packages

• unbound - validating, recursive, caching DNS resolver

Details

It was discovered that Unbound contained multiple security issues. A
remote attacker could possibly use these issues to cause a denial of
service, inject arbitrary commands, execute arbitrary code, and overwrite
local files.

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 20.04

• libunbound8 - 1.9.4-2ubuntu1.2
• unbound - 1.9.4-2ubuntu1.2

Ubuntu 18.04

• libunbound2 - 1.6.7-1ubuntu2.4
• unbound - 1.6.7-1ubuntu2.4

In general, a standard system update will make all the necessary changes.

References

• CVE-2019-25031
• CVE-2019-25035
• CVE-2019-25040
• CVE-2019-25038
• CVE-2019-25039
• CVE-2019-25042
• CVE-2019-25041
• CVE-2020-28935
• CVE-2019-25034
• CVE-2019-25033
• CVE-2019-25037
• CVE-2019-25036
• CVE-2019-25032