[ol9_appstream] unbound-1.16.2-3.el9_3.5.aarch64

Unbound is a validating, recursive, and caching DNS(SEC) resolver.

The C implementation of Unbound is developed and maintained by NLnet
Labs. It is based on ideas and algorithms taken from a java prototype
developed by Verisign labs, Nominet, Kirei and ep.net.

Unbound is designed as a set of modular components, so that also
DNSSEC (secure DNS) validation and stub-resolvers (that do not run
as a server, but are linked into an application) are easily possible.

Changelog (Show File list) (Show related packages)

• Wed Apr 03 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-3.5

  - Rebuilt again with z-stream target

• Wed Apr 03 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-3.4

  - Correct typo in new config file

• Mon Mar 11 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-3.3

  - Ensure group access correction reaches also updated configs (CVE-2024-1488)

• Wed Feb 28 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-3.2

  - Ensure only unbound group can change configuration (CVE-2024-1488)

• Wed Feb 14 2024 Tomas Korbar <tkorbar@redhat.com> - 1.16.2-3.1

  - Fix KeyTrap - Extreme CPU consumption in DNSSEC validator CVE-2023-50387
  - Fix Preparing an NSEC3 closest encloser proof can exhaust CPU resources CVE-2023-50868
  - Resolves: RHEL-25642
  - Resolves: RHEL-25670

• Tue Oct 11 2022 Petr Menšík <pemensik@redhat.com> - 1.16.2-3

  - Fix NRDelegation attack leading to uncontrolled resource consumption
    (CVE-2022-3204)

• Tue Aug 09 2022 Petr Menšík <pemensik@redhat.com> - 1.16.2-2

  - Require openssl tool for unbound-keygen (#2116802)

• Wed Aug 03 2022 Petr Menšík <pemensik@redhat.com> - 1.16.2-1

  - Update to 1.16.2 (#2087120)

• Fri Jul 08 2022 Petr Menšík <pemensik@redhat.com> - 1.16.0-3

  - Disable ED25519 and ED448 in FIPS mode (#2079548)

• Tue Jun 07 2022 Petr Menšík <pemensik@redhat.com> - 1.16.0-2

  - Restart keygen service before every unbound start (#2094336)