Skip to content

Commit

Permalink
unbound: Update version from 1.6.3 to 1.6.8
Browse files Browse the repository at this point in the history
Am 05.02.2018 um 17:29 schrieb Viktor Dukhovni:
>
> If you're using unbound as your local DNSSEC-validating
> resolver and have enabled DANE, an issue is resolved in
> unbound 1.6.8 where NSEC records for wildcards could be
> misused for invalid denial-of-existence proofs.  See:
>
>    https://medium.com/nlnetlabs/the-peculiar-case-of-nsec-processing-using-expanded-wildcard-records-ae8285f236be
>    https://unbound.net/downloads/CVE-2017-15105.txt
>
> The first article mentions that the same issue affected
> PowerDNS and Dnsmasq.  So if you're using one of those,
> you might also need to update.  While Google's public
> DNS was also affected, this is out of scope for DANE,
> as you get little security from relying on the AD bit
> from remote resolvers.
  • Loading branch information
pmenzel committed Feb 5, 2018
1 parent 0ff006c commit 973171b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion unbound.be0
Original file line number Diff line number Diff line change
@@ -1,6 +1,6 @@
#!/usr/bin/env beesh

# BEE_VERSION unbound-1.6.3-0
# BEE_VERSION unbound-1.6.8-0

## this file was created by bee init and should be executed to build a
## bee-package. (Additional hints are located at the end of this file.)
Expand Down

0 comments on commit 973171b

Please sign in to comment.