BSDSec

deadsimple BSD Security Advisories and Announcements

OpenBSD Errata: May 22nd, 2020 (unbound)

Errata patches for unbound and unwind have been released for OpenBSD 6.6
and 6.7.

Specially crafted queries may crash unbound and unwind. Both can be tricked
into amplifying an incoming query.

Binary updates for the amd64, i386, and arm64 platforms are available via
the syspatch utility. Source code patches can be found on the respective
errata page:

  https://www.openbsd.org/errata66.html
  https://www.openbsd.org/errata67.html

After patching, restart the unbound service.