RHSA-2020:1716

csafUSredhat_csaf

Red Hat Security Advisory: unbound security update

Advisory ansehen veröffentlicht 2020-04-28

An update for unbound is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

01

beschreibt (1)

Zugehörige CVEs.

IDSchweregrad ausnutzbar
CVE-2019-18934UShigh7.3—
Unbound 1.6.4 through 1.9.4 contain a vulnerability in the ipsec module that can cause shell code execution after receiving a specially crafted answer. This issue can only be trigg…
02

Referenzen

Externe Belege — Patches, Meldungen, Analysen.

03

Behebungen (78)

  • Behobenpython3-unbound-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenpython3-unbound-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-0:1.7.3-10.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debugsource-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debugsource-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debugsource-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debugsource-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-debugsource-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-devel-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-devel-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-devel-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-devel-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-devel-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Behobenunbound-libs-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    For details on how to apply this update, which includes the changes described in this advisory, refer to: https://access.redhat.com/articles/11258

    https://access.redhat.com/errata/RHSA-2020:1716
  • Workaroundpython3-unbound-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundpython3-unbound-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-0:1.7.3-10.el8.src as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debugsource-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debugsource-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debugsource-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debugsource-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-debugsource-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-devel-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-devel-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-devel-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-devel-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-devel-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-debuginfo-0:1.7.3-10.el8.aarch64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-debuginfo-0:1.7.3-10.el8.i686 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-debuginfo-0:1.7.3-10.el8.ppc64le as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-debuginfo-0:1.7.3-10.el8.s390x as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

  • Workaroundunbound-libs-debuginfo-0:1.7.3-10.el8.x86_64 as a component of Red Hat Enterprise Linux AppStream (v. 8)

    * Do not enable ipsecmod in the unbound.conf configuration file nor via unbound-control, if DNSSEC based Opportunistic IPsec is not used. * Use the `username` option in unbound.conf to make unbound drop privileges and reduce the impact of a successful attack. * Enable SELinux to prevent unbound from executing shell commands, apart from the expected one specified in the `ipsecmod-hook` option.

scry

Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan