Ubuntu
unbound package

When will unbound 1.6.7-1ubuntu2.2 for Ubuntu 18.04 be patched to address NXNS attack?

Asked by Pascal

Hi everyone,

I’m corious if there will be a security patch for the today announced NXNS attack (http://www.nxnsattack.com/). We are a charitable organisation who runs public available DNS resolvers with unbound 1.6.7-1ubuntu2.2 on Ubuntu 18.04 LTS. In my understanding our unbound version is affected and since the severity of this issue is high I’m really looking forward reading your response.

Thank you in advance and best regards,
Pascal

Question information

Language:
English Edit question
Status:
Answered
For:
Ubuntu unbound Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
actionparsnip (andrew-woodhead666) said : 		#1

I suggest you report a bug. Mark it as a security issue

Revision history for this message
Manfred Hampl (m-hampl) said : 		#2

The issue is already under investigation
https://people.canonical.com/~ubuntu-security/cve/2020/CVE-2020-12662.html
https://people.canonical.com/~ubuntu-security/cve/pkg/unbound.html

Can you help with this problem?

Provide an answer of your own, or ask Pascal for more information if necessary.

To post a message you must log in.