unbound: update to 1.6.8 for CVE-2017-15105

A vulnerability was discovered in the processing of wildcard synthesized
NSEC records. While synthesis of NSEC records is allowed by RFC4592,
these synthesized owner names should not be used in the NSEC processing.
This does, however, happen in Unbound 1.6.7 and earlier versions.
(see https://unbound.net/downloads/CVE-2017-15105.txt)

Signed-off-by: Eric Luehrsen <ericluehrsen@hotmail.com>
This commit is contained in:
Eric Luehrsen
2018-01-19 21:24:54 -05:00
parent f09eaa4f39
commit b6cf69bca6
2 changed files with 4 additions and 5 deletions
+2 -2
View File
@@ -1,12 +1,12 @@
diff --git a/doc/example.conf.in b/doc/example.conf.in
index 83e7c5c..3ea2b28 100644
index 5396029..cbb51ec 100644
--- a/doc/example.conf.in
+++ b/doc/example.conf.in
@@ -1,9 +1,10 @@
-#
-# Example configuration file.
-#
-# See unbound.conf(5) man page, version 1.6.5.
-# See unbound.conf(5) man page, version 1.6.8.
-#
-# this is a comment.
+##############################################################################