Paths come from the repository package-file index for the observed builds. They describe archive/package associations, not every file that will exist on a running system after maintainer scripts, alternatives, generated state, diversions, or installation choices.
O OpenFactory pode iniciar este sistema operacional em uma máquina virtual do navegador, ou começar uma construção que inclui o nome nativo do pacote deste registro.
Cada linha é metadado do índice de pacotes para uma versão, arquitetura, suite e repositório. Nomes, URLs e tamanhos vêm da fonte; um link é um ponto de obtenção mutável, não uma redistribuição da OpenFactory.
In NLnetLabs Unbound 1.20.0 up to and including 1.26.0, a vulnerability on the 'serve-expired' code path can cause a double decrement on the 'wait-limit' counter per client IP essentially bypassing on
Low(3.7)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.13.2 up to and including 1.26.1, a vulnerability in ZONEMD configured zones (zonemd-check: yes) which are located below (but not at) a trust anchor allow for an attack window w
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
NLnet Labs Unbound 1.22.0 up to and including 1.26.1, has a use-after-free vulnerability when compiled for DNS-over-QUIC support with '--with-libngtcp2'. Each DoQ stream owns an output buffer that hol
High(8.1)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulnerability is present in the TCP/DoT reading procedure where there is no limit on consecutive reads. A malicious actor that
Medium(5.3)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a large TCP response can lead to a heap buffer overflow during the RRSet canonicalisation routine. This is caused by miss
High(8.1)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in the DNSSEC validator that enables denial of service and possible remote code execution as a result of digesting DNSKEYs.
Critical(9.8)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound up to and including 1.26.0, a vulnerability was found in that can progressively corrupt heap memory and under certain systems and compilation options could lead to remote code ex
Critical(9.1)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
NLnet Labs Unbound 1.12.0 up to and including 1.26.0 has a use-after-free vulnerability when compiled for DNS-over-HTTPs support with '--with-libnghttp2'. During failure code paths (i.e., RPZ drop que
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
Novel vulnerabilities to launch algorithmic complexity attacks on DNSSEC have been researched under the term 'ReTrap'. These result in degradation of service when malicious zones are used to serve the
Medium(5.3)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.20.0 up to and including 1.25.1, when Unbound is configured with 'serve-expired: yes' and 'serve-expired-client-timeout > discard-timeout > 0' (contrary to the suggested values
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound up to and including version 1.25.1, when the validator builds the canonical RDATA form for an RRSIG-covered PX/RP/MINFO/SOA RRset, it computes the address of the second embedded
Medium(5.6)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.22.0 up to and including 1.25.1, a remote unauthenticated client can trigger a libngtcp2 assertion (if compiled with assertions on) and terminate the entire Unbound process usi
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.7.0 up to and including 1.25.1, when the 'dnscrypt:' clause lists more 'dnscrypt-provider-cert:' files than there are matching 'dnscrypt-secret-key:' files, Unbound fills only
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.10.0 up to and including 1.25.1, when 'serve-expired: yes' is set together with a 'response-ip: <net> redirect' /'response-ip-data: <net> CNAME <target>' rule (or the RPZ 'rpz-
Medium(5.9)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
In NLnet Labs Unbound 1.6.0 up to and including 1.25.1, the 'view_local_data' and 'view_local_datas' commands of 'unbound-control' create a bare local zones tree for an already configured named view w
Low(3.7)
Desconhecido
A associação de pacotes está em andamento. Observado:
Detalhes (4)
1.22.0-2+deb13u3 · amd64 · trixie-security · Historical version
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.22.0-2+deb13u3 · arm64 · trixie-security
Afetada · Corrigida: 1.26.1-0+deb13u1
nvd · unbound · debian · 13
1.26.1-0+deb13u1 · amd64 · trixie-security · Historical version
