From nobody Mon Jul 8 18:08:16 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WHsYg5v22z5QHsG for ; Mon, 08 Jul 2024 18:08:23 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2101.outbound.protection.outlook.com [40.107.89.101]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WHsYf6H8bz4SQX for ; Mon, 8 Jul 2024 18:08:22 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcomlaboratories.onmicrosoft.com header.s=selector1-redcomlaboratories-onmicrosoft-com header.b=FMUdx6BN; dmarc=none; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 40.107.89.101 as permitted sender) smtp.mailfrom=stephen.wall@redcom.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=DvD3KeBQM70CwISoot1N/SYTyIWlKAsu8IAwWoz49kQqwH+TEIR0jmBytwC45v+XQeXfQ/l3ilRKObbZIjzqB3N4pDyixFYFlzvejmWQOcelOWNjuTqnDeolCX3boeyWC1JD6V47oHFDfoHMaqLMt5ESRKWpYSnpOxK++yOKevBvTdWGgCatWq21uysPUx21a6qKScfeBqgaM6pTJt0gMLzVshqrHJK8xytuCiobwIcil0yvJuCFxUyxH/ime/718YroCAKL/fUyeYHh72DeRo82eQaR9b/aVtdenfdjARlPOxRWeRNm1r3yZOykhGTqmaygKuX/DFmvAbzt1JaghA== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=nAql6z0r5JXTbcWELLpNqS3e9qLbQNTsHY/RNF9abc8=; b=VYH07UOSLLJEkun7s9XwMvZYuD9EY99/hOu88QhTUfG30DxBhYi7pdFpvG9TCMaAtmPktvuA/DpX3g8KQzC92sdOrmR6oUaAjU1LGvKG0c5wOkn6HimhhodsD+yHV9/NE5s36DLwCbwfigdmJDRPXif15poWlijuYt/cVflbwGSDT7NRLgj1Hm1EG0ImJe+BiVywZEMptUIxbD8jSbXWF5BDkPh9/ovzYEACt8LC9XvvqjlYNyj3kTvyGLWihJ/D89A+ATXkVOxYimgLDnGp6G55Nb/vicXYsb0VrufPTHDrfxYB2F4iARGSXIxxkxv2LMUfimDeCmNUpZ8fGkiCuw== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=nAql6z0r5JXTbcWELLpNqS3e9qLbQNTsHY/RNF9abc8=; b=FMUdx6BN6Xj/ceSl+2Kw/zN0z3HB+nb4sKWd0vgt8cyRvi8O6Wr7idZZV1y477qFdT3ucjbR9NknkyCxjwTT/MObSEwHti4x0vnEkG2BCCzkcqXdEfXDo/95/oHKnAHj8A/dKMNhfMJ/rJDk3VZgfCl6dzREDINvPVb8uAl8J0sofnJ9s6AIdma+Kq0JHg0Kgh3jQ6IqiYR5nt2/xM2rgb7KxwnGjmSIUPV8fc1xmNCSon7CkoPjpd3d5RZII0iiGWttusTH4S3pEDnEIWgenZLQrdxMHlyK/2eP8abEMRamXp8byYZLeB/Z9uLyItcirO67lQnq15OdGz5M8uFjNQ== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by PH0PR09MB11742.namprd09.prod.outlook.com (2603:10b6:510:2ad::16) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.35; Mon, 8 Jul 2024 18:08:17 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%6]) with mapi id 15.20.7741.033; Mon, 8 Jul 2024 18:08:16 +0000 From: "Wall, Stephen" To: "freebsd-security@freebsd.org" Subject: RE: CVE 2024 1931 - unbound Thread-Topic: CVE 2024 1931 - unbound Thread-Index: AdrH8HE4aG8eCTkTSMeV03DrXWBN0gCY2pKWALz8PbAAFkSgAADv20jw Date: Mon, 8 Jul 2024 18:08:16 +0000 Message-ID: References: <86jzi71tjx.fsf@ltc.des.dev> <20240703162938.7459b610@slippy> In-Reply-To: <20240703162938.7459b610@slippy> Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|PH0PR09MB11742:EE_ x-ms-office365-filtering-correlation-id: cfa34681-fd64-431f-4396-08dc9f78f0ea x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|41320700013|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?WkhMcm0yOTlTZkJwOFpodloweFB3M1Y4MWhKcjdqR3Nma29KbnoxeXRyUnIr?= =?utf-8?B?WGUrcTM4dUNPNFpVNHh2UFpkUUN0SjVIcDU4ZFhDOExDNTg2YStZZUhEcEU4?= =?utf-8?B?T2hncWxWU1VhVlM2TzRHRVVkclY0ejRJRWl6NUxBVjA4TlJUZmR4RDcxZThh?= =?utf-8?B?TGVZa0o2RWtoSHRReE9DVGpuNm9lMGlLYXJKS0Y0NDlWdFh5ZjJxQWQ1RE93?= =?utf-8?B?N1dZNldpUWJOZjJYMzMrNGtwUWpFc3lQTVBXT3IramloZGxaZ2s4SDBwdzZq?= =?utf-8?B?V0h3NzREN2YwN3dHUHM2NDlhM29QY0YxWkVlQ0xjZjlIWGpRZFE2M2czWU4z?= =?utf-8?B?bURVaW9jV3pabmd0eWtmVklJc3V4ejI0SnZORGc2RGp2dmtlQWRmaXRpUFVt?= =?utf-8?B?ODhSelVoRmgxNDBYcDZXTGtGVEdnUHJJTDc5VDE4S3ZuaUYvRjEwQzBFT3B4?= =?utf-8?B?cnhPeVFYbG5pSmlxQ1RLRlVRUGNyMGVHNUlCaUE4R2p5TkpGZkVZcHc0WjVG?= =?utf-8?B?OXdXWW9yYys2Zk9NNzBnNFlKZ2NwWkFJQUx6Q2ZGRHRFV1RwaWlUSk1iZVR3?= =?utf-8?B?ckxWMmVXcklEU3EwRy9UN3lnYWZ2cE5FaXE2cGhSUHVRVi96a3RaRHdKMFVm?= =?utf-8?B?OGY1MjZ6bHVqODhvQy9LLzhFcjJIUVdiYmUvNXVoY1cyTXptY1ZNWVlqd1lt?= =?utf-8?B?aDdwZGlMNVp1Zmo3MzJFSld2bFdGNlQvczZxUGZTMGxpWTZCaE43OVRmNlRt?= =?utf-8?B?eEV2T1BuamlmSWUzelFEWjFUbUg5SW9JVG1WZEUxb3B1MFNLQUoyMkhET0tN?= =?utf-8?B?eEYyWkV1TEdZdVNEMlI4WE1mZFM2aytZSENFbDgxSGtYdGNhZHNqcXFKTEpl?= =?utf-8?B?REtkN0hjVEpZdnB2UDhkMHl6emhiL1hRWlFmL3RtRFBUWklIdGtsRlFrYUlF?= =?utf-8?B?cG5kbTRZNEIrQWN3UzhsMWtOUDIrQmhiRk1EODl4Ynd0bHBYb25hRXhaNWVq?= =?utf-8?B?dU5vbzg2NktTSVJPd1Y1UlkvZ3F3RDR0RG9yV2h1V2xRUnFQZVY3THovMzFw?= =?utf-8?B?KzdDM3BCbm0zaEVFMHh1MHFucXpNN0MwU1FTclArNDU3WE1paTdYcFhYelZ6?= =?utf-8?B?MDBFcUVRRGxPL3pZdjBJZFRkRXlJS1ZHTTFIdEpYc3J0SmU4bXBxWFZWWlZl?= =?utf-8?B?RW9hOEdGSVhTb29WWGFQZU9jdDNONW9oc3RiMFRrNUk2NmM0VXU4NVNYQ2xv?= =?utf-8?B?bEJmVExVRSt2cllVS3VtdHIzaUwza1F6bExMRXdPelcrWTB4TTZlWm80Mm9Q?= =?utf-8?B?VlRwWVNIelkxTDNxeWFrSkRxeHJLTTkwQ2xOZzlWcnJNVXplWWJmQjZvMjlX?= =?utf-8?B?eFNCWi9TcGhCUTNNTk5QcXYyb0drdnB2emZNZ3ljeGxMQ2JPSndpczB5SzVF?= =?utf-8?B?NFR4V25ka2RwOHdzUXlWZzYvdVZ5cVFqZ0tQL0pLWlUrZ1FNVndUVUtJcUk3?= =?utf-8?B?R0lWYitLSis4ZjFLNkFyNmVxT214MHBHY3ZWeTB1d0trMlAzUVBxQTBSNjlZ?= =?utf-8?B?c1VZdjBkamdOWFg0em8xU2pJbWNIdkZvaUoyL2N1YlNFY2JJTXpaRFV6NWto?= =?utf-8?B?bUR2UWVJK2pHODVFS2xrT3hycWZnNUNoWnlhcm0vN1VHbUZidnRBWGJ5UmtN?= =?utf-8?B?MzVnYngrd3RLdU5LdkV0d09TZ0E4RHFxZ3NNbGdjdDRPUjkzeFpBK1pCRWZP?= =?utf-8?B?a1hKYjVtWjhSSmVmRzJyUlB5WktUZSt1cDk5dlZtRDVSbE5pWFp4dk5JeFJ0?= =?utf-8?B?ajlZZndpV3lON0ZpcHVRRnBGeHlRMHJLb3A4RGtyandKMmROd2cyZUR2RlpD?= =?utf-8?B?bU1JNDllZjI1Rk0wbnhsMUUxbHY0dTVId1d5dndibzA3UGc9PQ==?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(41320700013)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?cUkxYWQzVlRDYkVuTEJpZWk4V3k2eTE2U0RORDF3QjBtYmFBb1Q2bEMrMXZS?= =?utf-8?B?QlBkWGVYckFFUUF1UzNqemJpZS9iVElpL2lMZDdpSDJIMTNFT1NZV2VGYXdp?= =?utf-8?B?WGZTalJaNWxFS1lWSExhSXBQRnFIL0t6bDc3QWVPVjNySUlxTWJKTDdmemw3?= =?utf-8?B?YmNoMnNEMjFXcmxZWlZRQ1RSQWd5YUFOUFplczhYUlhpMGpzdnhUamJOY1Z3?= =?utf-8?B?M01xV3lOaDVXRTJGVnNmQW5wazdlaDkyMW81MHY4eHNyQUtVbk9wVVRTWHA3?= =?utf-8?B?djIxRlRpRTlRamZNRGlSQitYMEx5N2w5cUlyUERhOUhMOW1lNUhXTDVrZG1m?= =?utf-8?B?YUtId0lYN1BLM1FQWGpnZlhORGNuK2Vxa2JYam1MaWhTWldWTUUwSXl5WmxL?= =?utf-8?B?dTFDTDVGaXlwQXlVWlVWU0lLUEpuMC9GK2VkSm9pSmoxNmdkOHFKSUJ5MG5a?= =?utf-8?B?VyttcEo4MG9HR2NpMEM5ZVJZT1VFTmlXL0ZXTHRBR2M1K0I1TUI2aXVUZ0pO?= =?utf-8?B?djJ0YjA5QmU5SlZkdzV2cHZuNytBLytUemdpMGhMenZSVGQyRmVYNkhTWUFN?= =?utf-8?B?b2lRNUF6YnRmb1JlQ1VWT0k1K3VsRFZZbkZKVGI4MnZmdjhidWNPUnRybHg2?= =?utf-8?B?V2tkd21DZnkxNFVvWWduZGZqenVYQmZhQlhqTEJWVzdwd1U2VWdEZ1Z3VGZJ?= =?utf-8?B?dU9CdWJQaEVtL1VqVjZ1dEkyT2Z6TWhSVFhzRmVGSy92dGtyaTQwMjVVRnNu?= =?utf-8?B?OWNmcGQyeDR3Q0crZHBmOVpNL014S0ZEOEZMY1JJUzltYkJnM1paOFo4cThy?= =?utf-8?B?K0l3N0xodVVHeXhoNjRSVlBLVCtvZzIxdlNmSWRGZTBkcjV5NzQzTFZWRUYr?= =?utf-8?B?UGFPRUVVOW0vMkEwNWprVEp0K2hHSnBaQ1dEOWFsemJ6ZFFMRU1Xclgwenha?= =?utf-8?B?R0ZKdWt3UjhJU0hRNTdSQU1LRUtkMTFTVUY1RVNFKzdKQWphZFI0VHRrMUx6?= =?utf-8?B?UytFdUFNWmZRSHJoNDA1V29uSFZyY1loRmJ1a2gwUDBiYllUdHptRUNKSUNM?= =?utf-8?B?RUVQeEZ4REw3cUFMdE1mc3FMNXNpQ21FbktSMFVHWVZPUTNIVXZVT1RpaktO?= =?utf-8?B?eTdJczBWc0Mrbmw3cDlMT2JPTHV0aXBVZ256QlJQelYxdnB5RlNOb1NDQ0FW?= =?utf-8?B?STg2Y1EwVWMxWk8zTWhhYngrTzh5Y09Fb3djWFYxYXpOMUVoM3V6ZDgvd0c2?= =?utf-8?B?eHVuTHFoRktVUUdiZUQrbS96Y0NaY0ltVFk3Q09yVk9aSGhtaDNLalVRZ3Vw?= =?utf-8?B?Ti9VdnRHRFVJVklmVE5xN3ZCR3FCYm5qUi96OHNLVmt6K3dlNXlETTVnL1JP?= =?utf-8?B?SVlpS0V3Q1FCTmoyRTdNemNiTTJVcGlZU0NLcFA2Tk5ITTlCSnc1SVFEMHUy?= =?utf-8?B?L1NZNm0xRzFqbEF0bnhMaDlWNkVVV3BaUTgrMnY3MXRrYmgxa01MZ05nYVR4?= =?utf-8?B?TSs2alMwaHlsSDN6N2p6c1JuYXo2b1ZSSVlNcmltamdWZW5EQ2thUmI3TURC?= =?utf-8?B?dlE2TkxNTzBWc1ZGU3FMaXRaMWtuVkVMYmNsSVlsRS9wbXhzWWtUZ1YyVmhH?= =?utf-8?B?b3JlUUhCUVFCSkoyTkNkempQK2tucGtydks5RlpzQmRGQ01tRjBudXZ2SmVr?= =?utf-8?B?elBEZzBZRnlKaDVwS0psa2ZBcFJTMmduZjBQYi9ZQnhKYUlMSnlLZUY4R2pW?= =?utf-8?B?U3JoQ3V0S3liS1F2Zk5Rc0plR2ZUOVBHZ0VaQmN1UW15eElXYlJ3STBiL3dz?= =?utf-8?B?M2htaExnWXcwajBBNjlHQVl2bjhMYnNFUDZwd2toTjk3d2NlN2locEVwNUUz?= =?utf-8?B?ck41UVA4MWoxb0MzSWtlQjludU9VV2VZWnBNRjN3SWJwOWswTlU5Z0hLS0lL?= =?utf-8?B?SHpFbUZaOHduVlJsWU5qWUhIMXk2WHdQZ1g0TGg0cktXOFZNYURRVzl3c1pN?= =?utf-8?B?OThIQU02MVFMc3JESGdERTd6VXdoOEV3eE9tSUcvTExsZTVTYmpFN2Z3TnJk?= =?utf-8?B?Nnh3YkREL1htcjZsMjkvbzlTRmEzM2tsME1LaFhsaDJCamo1K3dMaXF3bnZz?= =?utf-8?Q?TVIc=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: cfa34681-fd64-431f-4396-08dc9f78f0ea X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2024 18:08:16.6049 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH0PR09MB11742 X-Spamd-Bar: --- X-Spamd-Result: default: False [-3.40 / 15.00]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; MIME_BASE64_TEXT_BOGUS(1.00)[]; NEURAL_HAM_LONG(-1.00)[-1.000]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_SHORT(-1.00)[-0.997]; R_DKIM_ALLOW(-0.20)[redcomlaboratories.onmicrosoft.com:s=selector1-redcomlaboratories-onmicrosoft-com]; R_SPF_ALLOW(-0.20)[+ip4:40.107.0.0/16]; MIME_GOOD(-0.10)[text/plain]; MIME_BASE64_TEXT(0.10)[]; RCPT_COUNT_ONE(0.00)[1]; ASN(0.00)[asn:8075, ipnet:40.104.0.0/14, country:US]; MIME_TRACE(0.00)[0:+]; MISSING_XM_UA(0.00)[]; DMARC_NA(0.00)[redcom.com]; FROM_HAS_DN(0.00)[]; RCVD_IN_DNSWL_NONE(0.00)[40.107.89.101:from]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.107.89.101:from]; TO_DN_EQ_ADDR_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; TO_MATCH_ENVRCPT_ALL(0.00)[]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; DKIM_TRACE(0.00)[redcomlaboratories.onmicrosoft.com:+] X-Rspamd-Queue-Id: 4WHsYf6H8bz4SQX PiA+ID4gYSBwcmVyZXF1aXNpdGUgZm9yIHRoZSBEb1MgYXR0YWNrIGRlc2NyaWJlZCBpbiBDVkUt MjAyNC0xOTMxLg0KPiBEaWQgeW91IGFjdHVhbGx5IG1lYW4gQ1ZFLTIwMjQtMzM2NTUgaW5zdGVh ZD8NCg0KSSBtZWFuIENWRS0yMDI0LTE5MzEsIGluIHdoaWNoIHVuYm91bmQgaXMgdnVsbmVyYWJs ZSB0byBhIERvUyBpZiAnZWRlOiB5ZXMnIGlzIGNvbmZpZ3VyZWQuDQpUaGlzIGlzIGZpeGVkIGlu IHVuYm91bmQgMS4xOS4yLCBidXQgMTQuMCB1c2VzIDEuMTkuMS4NCg== From nobody Mon Jul 8 18:17:47 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4WHsmb73bRz5QKG0 for ; Mon, 08 Jul 2024 18:17:51 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2109.outbound.protection.outlook.com [40.107.89.109]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4WHsmb0vtQz4V1j for ; Mon, 8 Jul 2024 18:17:51 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; dkim=pass header.d=redcomlaboratories.onmicrosoft.com header.s=selector1-redcomlaboratories-onmicrosoft-com header.b="gtSgr/Jj"; dmarc=none; spf=pass (mx1.freebsd.org: domain of stephen.wall@redcom.com designates 40.107.89.109 as permitted sender) smtp.mailfrom=stephen.wall@redcom.com; arc=pass ("microsoft.com:s=arcselector9901:i=1") ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=G8EIhxeslwVS5vCsO9v+mVjfEQondaL2UDTR43A2EPrsWL4/ulCcseNlnnTnhlcyDmqqp4o+dX2z8CZCGz8W2Dx0X5PZQAFg9b4sUMVM+Gkb1WQmGZ9qH8VNcaaNOElGf0wux/cN+VF9Y0M0AOK/TKgquTTxUX5sDlErUgbguP4+Cm2i82KBnp1xr9+W2CKKGq9WX+I3hmFuCBSJl4BF5K5MWpaFRyfx6KSg8w4PTRMhOeZ19jB/08Cah/SmjPWkZVwBhU52KpDFDVPvf9lwHs36dMUiZQQCIRG8pKT7lcPb1nyAAX4ivOAFSrEBzcXaXdWQUEKivfN+4p0sEEBD9w== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=0baBGZkH6LoQQh+mfaPZZYglkIjhFaVfs9xdEHUz4ts=; b=NAjGiWln8YDyoiXeLYF/A0kkzsgZdaP35cEokbEmet9zSFHoHm9/LguQiKWlXKW2+nnnw22+1XG+9GrpnDnWGDBz7fj5vAjTJgVpuxpVEuhgOYfx8hWxyo7NsTbr7BVcHKbYlv7Ub9AFjMka+q7usubKwwXMoYCM4mpn66HDugAK3bma0R5po12+5ulM8GgEgH5ZXHeOEvH7AunY6pEcA1LZtYV6k+eUWmmzquAEWYkUhF5dPzrspIIAQY8r1yT9J+OfYdDnxCrGWKYjBC/HF4ZkbJlHWfiOTeF75BztqApOXZCG46N3qAxsFzvmBjbz1KpLppSDNeLhHr9tb2XhNA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=0baBGZkH6LoQQh+mfaPZZYglkIjhFaVfs9xdEHUz4ts=; b=gtSgr/JjnWEsj6Z+JKL9gznLhUfUXpjaLGHaXeQUKeK2vDc24tqyFuY3yKqKLH3oXRUzAnugzFYw3XmVvNhcGEYuEuW4A8L/vyvX5suh+jMnYyC/IEVFqJUXV7XNPsjhXEz9BU+A+Qt01HejQPt8bfqfEH7A2miubOzR6cPrgLn9NwHA9Lzf6gC2n2ub5mu4R2NNADDEvX+oOvTd6QyUa6GRbsdUH0qN6ZCHyqCr3+6XDZGsx8Kx8ywjKucnwchhSvD8riOrNAbyO6AoWCC9L//5bY4WILEt8n4K1g44zo/ubIoWt5Yse+GxaOCAUYaAz4LluqmufhHdXhiFvkXUtg== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by PH8PR09MB9850.namprd09.prod.outlook.com (2603:10b6:510:18e::12) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7741.36; Mon, 8 Jul 2024 18:17:47 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%6]) with mapi id 15.20.7741.033; Mon, 8 Jul 2024 18:17:47 +0000 From: "Wall, Stephen" To: "freebsd-security@freebsd.org" Subject: RE: CVE 2024 1931 - unbound Thread-Topic: CVE 2024 1931 - unbound Thread-Index: AdrH8HE4aG8eCTkTSMeV03DrXWBN0gCY2pKWALz8PbAA3gAsAAAokOsg Date: Mon, 8 Jul 2024 18:17:47 +0000 Message-ID: References: <86jzi71tjx.fsf@ltc.des.dev> In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|PH8PR09MB9850:EE_ x-ms-office365-filtering-correlation-id: e6a06d32-1cd5-46d4-81db-08dc9f7a44f4 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|366016|41320700013|38070700018; x-microsoft-antispam-message-info: =?utf-8?B?QUYzbWovYzU2Z0lXaGdmc0Jsd2xaNXdxdHkrNGZCTHEyaHdnU2VFS0haSUNX?= =?utf-8?B?RzlFai9LUXAvNjRNakdsckgrM2ZZR01VOUxUNHlFcDVoNUNIUGxTVDVZVUFJ?= =?utf-8?B?RGtZc1ljak92TjI3ajUxbzJjeHZtcWRVTTJHbklqSjhHVFdVa0V0ZGc0SGpm?= =?utf-8?B?NUh0ZENiNlJrMEpVTGJqdXZFYm9tbVhkRHd5VkIrUHJ1Y0hPckFpTityek1Y?= =?utf-8?B?ZE5ONHltOTJmTk54NnFoLzR6cXlYdStaNWE1ZUtwK1BQTHZSVzJaZ1hYYmtI?= =?utf-8?B?WVpKNWNPUkgyUDJiSHB5M00rcGhBeUtNbXJyQXNseExxQXI5aGE2akhQQXZa?= =?utf-8?B?VnFpUDNSSmtCdGdpZlE4YnhLaEZoRDRGTGFTbTU3bUJXSFlBRFV6SE82OE1t?= =?utf-8?B?dnlYZCttdVBGZDMzODZ2VWJLK3JmZmllbURsTEorV1Q2WmpDWkU0OFBUR1Np?= =?utf-8?B?OXRXL1JFcFY3ZllUNCtMSHVKZ0k3eXM4R09tam5ZRFR0elE0SHpMOHd5MjRr?= =?utf-8?B?cU9sWnlzRk5VVFhBTldET1l3U2VVYTZmdFREUTFRTU9OUnRWeVUwNlZiRzAv?= =?utf-8?B?YVJablFrbGF3RlNRZStIRVRwTldDNVY1ZC95ak5xb2h6QzZMS1RVMG5wbzNN?= =?utf-8?B?ektsVWU0bm1LdjI3OG5JVzJON2kxOG40OGFKOVZWUGNlQVA2VXphQ3AwVm9u?= =?utf-8?B?a3BBZ21NeG1QTDB0WGVsQUNDUStjTzNEWWIrM21nU2lKSEJSWmZRYkV1Ti9o?= =?utf-8?B?Mm1CSHNYOTV0V2NmQS9OTjFTNVR6T0ljSEYwckpZbDJnWHpDTE8yczBFL0hF?= =?utf-8?B?WjRHWmhQK0h5b25PbkZ5SUg4U2pMb0NmRlpRdjFrRExEd05TVEFib2tUNU1m?= =?utf-8?B?MGlrTC9JcmJNaXN2dXdrMkpWZjR2YnJWOEZmUFM3K1lmS21CSUkwREM1b1VL?= =?utf-8?B?TlRjdjVkdnZUODA3dkFQc1F2M2d0WmxxakhCUXRnV21IUGVhYWZQdVU0Y0l0?= =?utf-8?B?SXdseVA2RkpBeTBacTUwZXk3WURISW1ENS80M2RCSHRxS1FkVCtrVmVNWU5t?= =?utf-8?B?QUFBQ3c5N1ZGN2trSjFIZXBxbHQ4Wktodk9UV1hESCsyYW1YSFFOdDNuM0Uw?= =?utf-8?B?bzZoaEdkcGdUT1lMOTJNUno2NzlTQStiekpKUzFVc2x0bkdYdHJINHA1V25q?= =?utf-8?B?UEgvUDhUdEpPeEhJUngwa3VDRmtpbmZPbkMvK1lBRW9SM3NlZnhMSjRMNGxY?= =?utf-8?B?VzFGc1JBSUpTS2NrcWVVSzdCQTFXL3k4cVg1VDZvUCt1NHlzaG5EWU1oRU5n?= =?utf-8?B?SlVZR1dmZkx0M0FMRUNTK2M5czQvSEp3cXNXNDR4SWsvQVpNOWdkZ0lKTVZY?= =?utf-8?B?L2hhU1ByZmRWZEpKaXRodVlPNytpeWEvMTA4Wkc4dmtkNUdVOCtFWXhIWXhs?= =?utf-8?B?YTBhN3JqMTQ1bHVINjlOMzE5ZVlQckFyMVBHUE95MktnTkw5c3NXcXR2ZXVN?= =?utf-8?B?SnJJbThGWVNmVlM0ZGlZc2puTFlEbS83MVAwOHpLajZBakhQUXE4eWJGc2pL?= =?utf-8?B?Qmk5NFR0R2pnQll5cUJveGNYQ3g0R25OUzZYL1hMOXZaQ2lNYVcwREI5cCs4?= =?utf-8?B?SG9NQTcrZFpIU2FCMTI5Rk9RdFFCdU5XM3NmRlI0UU5zWVRlMGxZZVFON1Y0?= =?utf-8?B?YzhzS2pFU1hTT3o3dmtDS0d1aElHakxQbUpUNFlaYjA1TVN6dHAzQXkveWZ4?= =?utf-8?B?WnR0R1VSSDRRQ3EvVjZiUFdoY1BNR1R4Q1BLbDFIb1Z2SnY3VC9KM3J1dEtP?= =?utf-8?B?bGZqb2VORTdJZzd1cnBlZ2grYjhWU0dBbGwzMU4rSTZyTHpLNk0vTjg5d0Vs?= =?utf-8?B?MFdCeTFxZDh0Q1NZZVNHWkgrMlB4Wnp0bi8wTzU0bzhIOGc9PQ==?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(366016)(41320700013)(38070700018);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?WWJKajBiSWROV1BQY2paRFc5RFFjZFFYdnJSajEzR3VlSXdpc3o5R1pGUjA5?= =?utf-8?B?ZGhITU1FRnZQdkpFbkhGZ3ZTdEhFTVM5dkk4Z0pudE5UNXY3V3Z3Nk5Sb094?= =?utf-8?B?RjJpbkJRSDZVYnVjeTR1NmJHLzhsdUFWN0l0MkF4NXFmNHFuZStFUDdhMnV2?= =?utf-8?B?S0FNcUNKbk0xL1V0Mms2Q3BwNmNORUpmampJVzUvc1FsemNoUXppdlhxUlo2?= =?utf-8?B?cEhyWUxLblZwRW1mcmlEQThuQTk3eTJWTlhrMCtZclJOblVRSEx4bURMRmJV?= =?utf-8?B?b2ozTHgycGtvengrUWNld0lEYXl2MHFUS2hrZ0JYWTNoR2tlU2FQK1RYNGRY?= =?utf-8?B?ZTc1T01abEVNVUI3TGtUckhOZFlJMW5nTUdGRlNOVUliQzkzZk16OThvVVdW?= =?utf-8?B?S1JEK3pjMkkwYjdWajRwckdranE3UWU3OXJmekV6R1RPZE9sekpVeVZVc0Rh?= =?utf-8?B?Z3psdCtGSmRUMDBkMktkK1FwSGpKOEdoMnNPb29rZ3JtWjBETW5HV1l5bVEr?= =?utf-8?B?ZTUzZjlncHZJN1h5OWk3REhWVEh6ckNxVWplK2FacFEyRDBLV204OWdJelFE?= =?utf-8?B?bFl0WkZ2RVNFUGlNQ0xKNHNMWWxIYVlDNmJwUG1QeGFRNzVHVU0yTlVqOFZp?= =?utf-8?B?bVowMjk2SnEvNldxRWR5QWhLbEFESDluS0hsUTE0c0FsZ3Z3eHlKRmhXRU9T?= =?utf-8?B?UGV5WitOVkJwVjFIMWdEQlFWNHdYZUU2b2MrTldIMmoxdVEwaXdWR0k5U1hn?= =?utf-8?B?SllCajNSbmdXeUdwZ3ZlSmN4SlRYdWROWEdnSmN0TXBOS204YVBKdGtJcWtY?= =?utf-8?B?eFVEQXdmSTRUdWh2TlRsVmc3VHNvcWUrVWdmWko0MnNneklsbWczazl5bm5E?= =?utf-8?B?TjUwWXd6dEZmRDhLN1VaWlVrSzJHVFk4U1YwV0k2NkhXUGZKSytFZlNsSnB2?= =?utf-8?B?QjQybWtyMEVoTVFGK1RML1M0YWlpL3gvYTRGWmhGcEpQOE92OWtGM3VSUVVw?= =?utf-8?B?Z0hic0ZzNnNsWlFHNlM5MG1Tb1JuTUx0UVpYVFczTklXcmpGY0pqUXpEMHF0?= =?utf-8?B?TkhyOUdSUkw3UnFJcTBvNFgwTUlvRFpNMVVUczdNOHQ3Q3dKaUQxaUZOODJ4?= =?utf-8?B?OXZyYlFzaUFuNUU5NkNqQUFZYXdWckxBZHdOTmw3a005U3orTExqWnh3YThZ?= =?utf-8?B?VjFGL005WUhnMTRRWHNQdTVnYlhWZ1J3TE5jOVkzNGhreXo5Mk51ZnZJMTBB?= =?utf-8?B?Q09vT0Rid3RISVRUUHFvT3BvYjUxRmFFQTJBZzFnbkNLRGVYbWE2VTdNNHlt?= =?utf-8?B?VDZiRGl2TjBNWDRhU2Y5MjQra3kwQzF5dHVvMWZVR0kvK3dWRUI4NzNJVUlt?= =?utf-8?B?YmdCek5aY2FKOFlmT3lYcWdkNTZQOEdoV2NmWVBBU3FvdStvNXNsaytJUHlk?= =?utf-8?B?SmdjRmpLWmJoSjJzUnRKOG9YeVJqeUtzQU9iZGRtZVhuMmFSOFh2UlRxVER6?= =?utf-8?B?UVoraXV3OEg1aHIzVkpZeTkwelorVHU0UExUQVlJaHdrcXM0dEJ3RFdiYlh2?= =?utf-8?B?d2tpVWhHRUl2WUZBdHVKN0hkT2UzbjNCbkdybElmazhmZTZOYms1YnRwTEky?= =?utf-8?B?RXIybDBoR2hSVkFmSmxUTjloMnlGUzZRYTM0UXR5cVZ5OE1IcmZLY1ZVK3hn?= =?utf-8?B?MVNnSEd4cFJBa0dXUEx0TW5lZWlDaHZXQjdJM2tvaFliWEdlUXJNS1hGcGtt?= =?utf-8?B?Ykg1YUZVVTMzeW5Oay9UcmVyMzR4WndhN09WU3N1VFZPdzNBYmhxVnZ2a2RN?= =?utf-8?B?b2pzeGVxSVJ0T0h6N0w5OUF5bG9Rc3dzcStyR2NsS2dra2hTbldzSGgwM0Rx?= =?utf-8?B?SGxBM3I1OW9GVGoxQmJMK21wVTYrU3NEYzJmWUF3ZDllVEZ1M0N1bzY0aHdL?= =?utf-8?B?NUJ2UWZCTnBIVTJ6alFWb0RRUStDdGMrYzlHcHg4VW56TmxiUXBocjFjOEdw?= =?utf-8?B?K09RMnhoMmROU3FOSEtrMjhDRnV3SVNUNXV2c0IzamVxcXVTTlZsUGkwVHJy?= =?utf-8?B?Tk1YVWRoTEFHc3ZXR0xBdkNTemZEeFVsMFpKUWVxOFp2SHhFdVRNL1ZZVXhD?= =?utf-8?Q?n5/A=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: e6a06d32-1cd5-46d4-81db-08dc9f7a44f4 X-MS-Exchange-CrossTenant-originalarrivaltime: 08 Jul 2024 18:17:47.1388 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH8PR09MB9850 X-Spamd-Bar: ---- X-Spamd-Result: default: False [-4.35 / 15.00]; ARC_ALLOW(-1.00)[microsoft.com:s=arcselector9901:i=1]; NEURAL_HAM_LONG(-1.00)[-1.000]; NEURAL_HAM_MEDIUM(-1.00)[-1.000]; NEURAL_HAM_SHORT(-0.95)[-0.945]; R_SPF_ALLOW(-0.20)[+ip4:40.107.0.0/16]; R_DKIM_ALLOW(-0.20)[redcomlaboratories.onmicrosoft.com:s=selector1-redcomlaboratories-onmicrosoft-com]; MIME_BASE64_TEXT(0.10)[]; MIME_GOOD(-0.10)[text/plain]; TO_MATCH_ENVRCPT_ALL(0.00)[]; RCVD_TLS_LAST(0.00)[]; FROM_HAS_DN(0.00)[]; RCPT_COUNT_ONE(0.00)[1]; DMARC_NA(0.00)[redcom.com]; TO_DN_EQ_ADDR_ALL(0.00)[]; MISSING_XM_UA(0.00)[]; MIME_TRACE(0.00)[0:+]; RCVD_COUNT_TWO(0.00)[2]; FROM_EQ_ENVFROM(0.00)[]; DKIM_TRACE(0.00)[redcomlaboratories.onmicrosoft.com:+]; MLMMJ_DEST(0.00)[freebsd-security@freebsd.org]; ASN(0.00)[asn:8075, ipnet:40.104.0.0/14, country:US]; RWL_MAILSPIKE_POSSIBLE(0.00)[40.107.89.109:from]; RCVD_IN_DNSWL_NONE(0.00)[40.107.89.109:from] X-Rspamd-Queue-Id: 4WHsmb0vtQz4V1j PiBJZiB0aGUgdXNlciBoYXMgbWVzc2VkIHdpdGggdGhlIGNvbmZpZ3VyYXRpb24NCj4gb2YgdGhl IGxvY2FsX3VuYm91bmQgcmVzb2x2ZXIgdG8gb3BlbiBpdCB1cCB0byB0aGUgbmV0d29yayBhbmQg Z2V0IERvU+KAmWQgZnJvbQ0KPiB0aGUgcmVtb3RlIG5ldHdvcmssIEkgZG9u4oCZdCBmZWVsIHRo aXMgaXMgc29tZXRoaW5nIHNlY3RlYW0gaXMgcmVzcG9uc2libGUgZm9yDQo+IHJlc3BvbmRpbmcg dG8uDQoNClRoYW5rcywgR29yZG9uLg0KDQpUaGF0J3MgYSBmYWlyIHBvaW50LiAgU2VjdXJpdHkg c2Nhbm5lcnMgd2lsbCBzdGlsbCBmaW5kIHVuYm91bmQgMS4xOS4xLCB0aG91Z2gsIGFuZCByZXBv cnQgaXQgYXMgdnVsbmVyYWJsZS4gIEFuIGFkdmlzb3J5IChvciBlcnJhdGE/KSBleHBsYWluaW5n IHRoZSBzaXR1YXRpb24gd291bGQgbWFrZSBpdCBjbGVhciB0aGF0IHRoZXJlIGlzIG5vIGFjdHVh bCB2dWxuZXJhYmlsaXR5IGluIHRoZSBiYXNlIHN5c3RlbSB1bmJvdW5kLg0KDQpKdXN0IG15ICQu MDIsIHRha2UgaXQgb3IgbGVhdmUgaXQuDQoNCi1zcHcNCg==