From nobody Wed Jun 26 18:02:07 2024 X-Original-To: freebsd-security@mlmmj.nyi.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mlmmj.nyi.freebsd.org (Postfix) with ESMTP id 4W8V065F5tz5Px0H for ; Wed, 26 Jun 2024 18:02:14 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Received: from GCC02-BL0-obe.outbound.protection.outlook.com (mail-bl0gcc02on2102.outbound.protection.outlook.com [40.107.89.102]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mail.protection.outlook.com", Issuer "DigiCert Cloud Services CA-1" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 4W8V061BtDz446G for ; Wed, 26 Jun 2024 18:02:14 +0000 (UTC) (envelope-from stephen.wall@redcom.com) Authentication-Results: mx1.freebsd.org; none ARC-Seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=XLsIcrufLwjiXsES8HuPeOl6VRoRmoCrHFwaXAMFX+eYqdEcxRIXOPs8R93s9jN4BUA++tCujFfqTNyNQtHkdNm2fePVrKJ2OcK28a4n+2WhDoymSESkTPYbZXN351fXO6ej5jNO0ViD/Pm0D9OSKtw4BRulNxwcUqA5RBwaWfZYrIMqcL/+eZ1pMqGxNiVEWYAIMdFvxvPNyrHWglDiruvXvqIyT6FDFx3kjfy+Wum3vuFBwu7CJMz0SaNh9EL5wJBbAVA0ul4y2KFwa0S4sV0dXHIy597VqIcaoCvS8b8/bFf/l7EoPC0AmQlb6NEau+BLF8y2HAWjDC/2xPM5fw== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=LXFmvtJW36NNqS263otxQ7dj5GLiKLlVuybLEKGECek=; b=Q0WJF+obr2KeDylPFH23jscMvQtPr5YehXuvutwWart7oY3NmSlaZN0tKVSmbhwKW9/rbgS1CWgY/eGVoUIDkMwhQDimC2P84LNRqr/EWsXR1v/R+a2kDU6s516i9cPfvY05ar0HKk7G8CMdmQIcUGC+1FQmMy3G4J37PukCwoTCdL2IscLl6Kw3xmvc6oSLkr5Ccnf1eh3Jg6lXgAbBTRDBhcOvChRDsA+xf7zGC8e4N/cFIzGuEbXv+dArpfiHUirjJ5iXdGSLrXA70SZOhHaxgFHJfeJcN74Hsp3zlTXmj31XW2StoOh72ud/m+iphOiXUOI0mbjgm18oxM2mjA== ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=redcom.com; dmarc=pass action=none header.from=redcom.com; dkim=pass header.d=redcom.com; arc=none DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=redcomlaboratories.onmicrosoft.com; s=selector1-redcomlaboratories-onmicrosoft-com; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=LXFmvtJW36NNqS263otxQ7dj5GLiKLlVuybLEKGECek=; b=kNxk1r/pa2UTs00AMCHMjqV2lqjo33msQY3uTLjteDhY7MGfNHjaDGoFSPxNOOPbbozh72fm172Ise/YAP/XXY87qGDyWFs73AWfi+2OCQZW8pKq7b9mtw4tC0RSS7xupAmJ72q4QP0Fi0LNECNGSxAWjdy26Ejr5hTFNFYgI0OYYUj6OtfDd267TBekPmZ7IOuZ0rFrxnuWQTvh6HukkYlWY0O1xDBmqMwJQp4duTcqKGursHnBbFg3+2PQUMlUIpXozhxZS4Y+m+hOLqPiTJHunszxDohnxxYtzMDFHO25Z7drU2w9FrBUJWgZZOzVyRmqY0xSGoCjhc3jNWKrBA== Received: from MW4PR09MB9284.namprd09.prod.outlook.com (2603:10b6:303:1f2::12) by SA1PR09MB10867.namprd09.prod.outlook.com (2603:10b6:806:367::8) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384) id 15.20.7698.33; Wed, 26 Jun 2024 18:02:08 +0000 Received: from MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e]) by MW4PR09MB9284.namprd09.prod.outlook.com ([fe80::7849:d1ba:7ac7:46e%4]) with mapi id 15.20.7698.025; Wed, 26 Jun 2024 18:02:08 +0000 From: "Wall, Stephen" To: "Wall, Stephen" , "freebsd-security@freebsd.org" Subject: RE: CVE 2024 1931 - unbound Thread-Topic: CVE 2024 1931 - unbound Thread-Index: AdrH8HE4aG8eCTkTSMeV03DrXWBN0gAAmDUA Date: Wed, 26 Jun 2024 18:02:07 +0000 Message-ID: References: In-Reply-To: Accept-Language: en-US Content-Language: en-US X-MS-Has-Attach: X-MS-TNEF-Correlator: x-ms-publictraffictype: Email x-ms-traffictypediagnostic: MW4PR09MB9284:EE_|SA1PR09MB10867:EE_ x-ms-office365-filtering-correlation-id: 339914ae-2989-4e6b-3cb3-08dc960a1835 x-ms-exchange-senderadcheck: 1 x-ms-exchange-antispam-relay: 0 x-microsoft-antispam: BCL:0;ARA:13230038|366014|1800799022|38070700016; x-microsoft-antispam-message-info: =?utf-8?B?cXRwSmxnOCtHT1F5Q2VJeE1UUktteUhpdnBERXdMZmVkVzR4S1VsMENOUjZt?= =?utf-8?B?WVNUbmdCK1BaRTZTdzFvQ0lJa2twWDZJNXd3cDRzSnIrZzB1WEx5VjNsbjR5?= =?utf-8?B?ci85OEhaWldpSFlZS21NQjdnc0Y1RzJoRmRvSHlYZ3RvMWd4NlFhM3dvZEJq?= =?utf-8?B?WjdBNWdQVStodFdtcE9wbGQ2UXpNNDY0VG0yL0xNQndycVFPZjdiQlB0b1hW?= =?utf-8?B?R2tZL1hvMnlWbm1kak1JOURueGsyQi9QTFNLTFRGemNTVHBlVWJKSDZNMFlm?= =?utf-8?B?RFFLWVA0VDRtd2g4dzkxSEdTbzgrOG1rNVd2aXQ5TVFoelNhYm9EdVlzSGtX?= =?utf-8?B?MlYwdGtwYzg1TytZSmVPZVcrTlkyTFZBL3UvOXZnaDRkNXFzZXo1SjNaVHRZ?= =?utf-8?B?dGMydE85dE8xSVVRT1VUa1BJb1d3Sjgrd29BSldPcVVJYWRXNWpJd0tOSUJj?= =?utf-8?B?VVZ5cGZSYTh4L05IMnhxQURmOWJ2c2NFUmZXcEdTMU9vYTI0VnF5L1FFTE04?= =?utf-8?B?MWZ6b3hiNldHVUMzVXE3NEJ6cDNFWEt2SWIvK2dNZG53TDFzYVQrdm9jMDYy?= =?utf-8?B?djl6ZFB6MENxd05oVVVsS3ZqUUFMV1dWK0FsejhVWGJsaGFpeHRnYkV0R0VS?= =?utf-8?B?cjVkTDVLbkU4aUVmM0tYdHFwNm12ZW82czlzYVlPckYzb2VPNTU5U2dxcEtY?= =?utf-8?B?a0R6elZoU3JvWjFxUmhRQUg2RGRvTWRabzYzUElTVE1HaVlvNXNqcUNjN1pk?= =?utf-8?B?UmhPcE9oNThhaG1zRzEvWllTQW5seEpucU02R2dlNFBqYzZWVWt5WkMvNDhk?= =?utf-8?B?akthR0wxRHZIR1dvNzJ0bTFOTXNJcDhML1V6Ym41UGFWbGlvRit3clNndW05?= =?utf-8?B?WmR1Q2tVL1AxZzlNQnpiNmpxNFA0djEvNExIQ1U1MStNSnZhU3JnS1FCbnRm?= =?utf-8?B?WU9IZ3FpK0lYTEx0SHkzd0FlaFFCRzNTd0pRRkJaeG12TXJMVlgrRXRYY0F5?= =?utf-8?B?d2s5M3FUSFlNYVNETHdxa0FHczB3MmRLb3RLcjhSdFN6U21JSEY0SWM2dWt1?= =?utf-8?B?eUxrR1ZxeE12bTQ3S3lMUmtuYzN0RjlrR1RNbE44d2xYeE9FdnE5N0hFWWdj?= =?utf-8?B?V3lzejVCY3I5a1czOE4rS29SbGd0Q0FIZFJUTjZSbVpmMFhWajZiVGtsYXFW?= =?utf-8?B?L1FkR0s2eC9ab2w3R0ExK29CWDBxYS9SYzVLbWMwV05tVVdSYXk2NmpFREpS?= =?utf-8?B?WnZ0QmdQenNYZFNRZkcvYWtyODlVb0RZM1I4eFBOSjFHODhPbkxkVUZETHVr?= =?utf-8?B?ekJnUHhlZXNMWWhMb1J0cTVLS2l4WXFtODlZTDFReTVERnNjdHB2UjlOSnoz?= =?utf-8?B?WGxPR3RzWDltci9XVFhlQkp2UXBUZFcvb1ZLNU1QenFuOWVEM1dYT2ZrbHRR?= =?utf-8?B?ZzlWOW5Sb0FMSnozNThCcGZIWTBGcWVnSURvVFNjNFhPaXp4YXBmeXF0KzBR?= =?utf-8?B?Slh1ZFpUMFp4K0NjZFBuZlFORGNucmF1RmdmVmxWcTBJendwaTlsczdjOVh1?= =?utf-8?B?Z1ZuUFVlbDBXQzhkVDltQVhYTnlqVXlGaVpFYzR3RVJsNEdaa0J1RVBLT0k1?= =?utf-8?B?SmE4bVhSMWxhR01BLzM2YzFUcXNXWFh5dDBHVENVSnpveFhKQnFrdDBLcCt6?= =?utf-8?B?MXRJSHBXMzB5bFE0K2ZwTmZkbG81WHIvSWZGcGRJdmtKZXEybWJBL3RLRkZR?= =?utf-8?Q?xMTt64SCkvZ7gZSsMKCsHdPCCMIetafhEGUxAOs?= x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:MW4PR09MB9284.namprd09.prod.outlook.com;PTR:;CAT:NONE;SFS:(13230038)(366014)(1800799022)(38070700016);DIR:OUT;SFP:1102; x-ms-exchange-antispam-messagedata-chunkcount: 1 x-ms-exchange-antispam-messagedata-0: =?utf-8?B?RHhCdWR3c25Qb3ZjQ0VCZy9hNExNZWZGWTNaNVFUVkhqOW90RlovU2x5UEE1?= =?utf-8?B?Y3JrNGFWYmh4RW1IOHVGK3JyQlJ1WGlBYnRMb2RKZmEvVUJhT2ZPNDV1WjRp?= =?utf-8?B?Tko4YXgvR0cwN0YzL0pRelN6ajFQdUVHMVF1VG03a3NYU3RUWDBYWTBtcHlV?= =?utf-8?B?M2U5ZUR3Z2x4eER3MHV3U25HTEt6YjZ4MGRMY2Y5TmozclZ0V0hGWTc4UXFw?= =?utf-8?B?MCtjS25ndXlOai92M2xDU1FXdGZhSUMvQkhpZTdxSlFkRVY4TUw5QWVUWGEz?= =?utf-8?B?WEF5eGswQjY5Tm5YYVllVjcwZ1dLWmFPZlQzQmJiMEpOdzFyTUI2aTM2bkZZ?= =?utf-8?B?Mzh3eVI4NUc5NXlHeTJpWk84SVRPd1pXMnlRZkFCWUZlb09YR0M4TlNnZmNr?= =?utf-8?B?VnNabk5mK1ZCQldLRXVWZXQ5L0NTSDQ4bndDR3E4QXJWc3RzVE1UeE1lek01?= =?utf-8?B?WWxtY0Y2VHdXVnplc1FhaFY1TFgzR3QwWkgyWHJ6RTVtU0Z0aDVCRzlPTHAw?= =?utf-8?B?VFZCL2xHckZoOE83aDZOZ0dMWi85U2lmeWVEZDUvcWVkUkV2VGJuZHNoQ1ZK?= =?utf-8?B?eWxEYytXQUhPeU5EemlLNXI1R05zc1AwM1RlRjVGTnk4TCtKTjlxdGEvSGJ3?= =?utf-8?B?OHBaSUl3ZjAyaVJPellIYkJTN2ZoY2ZaT1pwMkNxS0JuT2hBeCtKOTJJK2M2?= =?utf-8?B?UDFSOWhDSTI3N29iTW4wWWhqL0xKQmxyOWZIL3Z5WGFadjhBUFpBZEYrTHRm?= =?utf-8?B?dHZjMzRONnk1UmoyT2xFMlozcXQ0aG91eUtxK2x3Q202SzlPVTIvZ2FiY2JT?= =?utf-8?B?TGxGRUJjNTk0OG1WZU1mV1lkOVFHZi9FejlpaGlvV2VHNXh0bUcxdHlZSng5?= =?utf-8?B?SStsejJQYXhzSUtxakhXOXVSZ1pnTk1ha3o2cVJWTEFGeVRmTndKZ2N6R2FW?= =?utf-8?B?anEzUE92T0YwcmMrYXZHdmpLWXpDR0pJdndxeFBkYzlsclpuYUtja2NjTXRa?= =?utf-8?B?OUNPRE1SdDVwR1NXZG1ldUNVTFlKS2xVWUswcmdSbE1iSEJyWUhWNDlubzh3?= =?utf-8?B?ci96WTJvMkF0amM3Vm5BdGU5RG56bm0zcjRKdkdmSXh1T092TWFmQzNFNDkw?= =?utf-8?B?QmhuUkdBMnZGWWh6YkticFkrNGtkMjdUejBhaVVaMnhsbmdIVnZ5ZTBndjhq?= =?utf-8?B?NHlGaGN4MTFBS1ZaeEhsN3g3OHBZL3RWQ1VKa3l6eDRIdFFMOStpRTMvQTBK?= =?utf-8?B?dzlIbFhFdTVLbndGa1BFVEdCWWJ1UkNvSlI0dzVjVEd2MW1JaGhKNjFMU1J4?= =?utf-8?B?c1V5VmduMWgvdTNvWXdzNno2OFl1ZTJjOVlRdWdaZGZhMkYvcGhVR0hWRzFt?= =?utf-8?B?ZHh5RzN6KzlLamc3bmxER3poMFpTaG9TSE1pZncvUGd6SzZDdU9oN3dOemht?= =?utf-8?B?SlRGY2xZejREOXp1WXRta09QakxpZm9iTmwrb256SzI2eFlZT2w0eEgyK21o?= =?utf-8?B?OXlPdTNkcXlqd0k2dkN6K09YT3QxMUJPa2RqaEt3bE15VDU1dnZuZmVNcU9E?= =?utf-8?B?a295dmhPcEdBMThpaDRVQWwveTJQRHZwRGpmNlFWVmp6UDJObHp3Z3JTSGtZ?= =?utf-8?B?RVVBYlk5TG5WcDFyRmlPMUFIYWU3N3J3OWRLMmZkSjZjOGJLdXdKeHduOVl5?= =?utf-8?B?eVFvV0JiVnNLSTVpUXllUEdJTGlhdFhaVXJnVmdUT0grMmI1YTVGaHl5ZnpS?= =?utf-8?B?a1ZFMWpQSHFuQWRwSS9pQ2dsc2JsaWE2dFZySmEvWkd2OGZ0ZmJySUlZcHBq?= =?utf-8?B?T3FYbmYyZ0x2M1lIdlNXaC9Sakw4bUpSRXBTelVlOFZQMXZnT2ZhOGh2c1Jh?= =?utf-8?B?Ly8vRXd5MzNWY09hbmtzOWpDNHpMWHZLNmRyWVdLUUplQnRKSlZyMy92Njdl?= =?utf-8?B?WklYNDNlY0VWN2R2UW1QaGFFZktaaXV2TkQ3S2NleTMyYUhGWjNQR2tKRGJ0?= =?utf-8?B?YjFFY0NiZXlZbEF0WFhJZURDL1dQdVFwaHVyRVhaWjMyc0UwdFJPYzhaSklQ?= =?utf-8?B?Y0haTEdWWUx0TnhDcWdxVlJETmR0QmxnT0h2SW9KM0FUczIvQTc4WG9XNjNV?= =?utf-8?Q?jxuQ=3D?= Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 List-Id: Security issues List-Archive: https://lists.freebsd.org/archives/freebsd-security List-Help: List-Post: List-Subscribe: List-Unsubscribe: X-BeenThere: freebsd-security@freebsd.org Sender: owner-freebsd-security@FreeBSD.org MIME-Version: 1.0 X-OriginatorOrg: redcom.com X-MS-Exchange-CrossTenant-AuthAs: Internal X-MS-Exchange-CrossTenant-AuthSource: MW4PR09MB9284.namprd09.prod.outlook.com X-MS-Exchange-CrossTenant-Network-Message-Id: 339914ae-2989-4e6b-3cb3-08dc960a1835 X-MS-Exchange-CrossTenant-originalarrivaltime: 26 Jun 2024 18:02:07.9196 (UTC) X-MS-Exchange-CrossTenant-fromentityheader: Hosted X-MS-Exchange-CrossTenant-id: 86200ba5-6348-4d6f-bdd7-96f43e8d9247 X-MS-Exchange-Transport-CrossTenantHeadersStamped: SA1PR09MB10867 X-Spamd-Bar: ---- X-Rspamd-Pre-Result: action=no action; module=replies; Message is reply to one we originated X-Spamd-Result: default: False [-4.00 / 15.00]; REPLY(-4.00)[]; ASN(0.00)[asn:8075, ipnet:40.104.0.0/14, country:US] X-Rspamd-Queue-Id: 4W8V061BtDz446G PiBUaGlzIENWRSBsaXN0cyB1bmJvdW5kIDEuMTkuMSBhcyBiZWluZyB2dWxuZXJhYmxlLiAgVGhp cyBpcyB0aGUgdmVyc2lvbiBjdXJyZW50bHkgaW5jbHVkZWQgaW4gMTQuMCwgYnV0IHRoZXJlIGlz IG5vIFNlY3VyaXR5IEFkdmlzb3J5IGZvciBpdC4gIERvZXMgdGhpcyBtZWFuIHRoYXQgdGhlIGJh c2Ugc3lzdGVtIHVuYm91bmQgY2Fu4oCZdCBiZSB1c2VkIGluIGEgd2F5IHRoYXQgbWFrZXMgaXQg dnVsbmVyYWJsZSwgb3IgaXMgdGhpcyBzb21ldGhpbmcgdGhhdCBuZWVkcyB0byBiZSBhZGRyZXNz ZWQ/DQoNClNvcnJ5LCBtZWFudCB0byBpbmNsdWRlIGEgbGluazoNCmh0dHBzOi8vd3d3Lm5sbmV0 bGFicy5ubC9kb3dubG9hZHMvdW5ib3VuZC9DVkUtMjAyNC0xOTMxLnR4dA0KDQo=