Accepting request 1152943 from home:pmonrealgonzalez:branches:server:dns

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

- Update to 1.19.1:
  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
    - Fix CVE-2023-50387, DNSSEC verification complexity can be
      exploited to exhaust CPU resources and stall DNS resolvers.
    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.

OBS-URL: https://build.opensuse.org/request/show/1152943
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=169

libunbound-devel-mini.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Wed Feb 28 13:35:31 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.19.1:
+  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
+    - Fix CVE-2023-50387, DNSSEC verification complexity can be
+      exploited to exhaust CPU resources and stall DNS resolvers.
+    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
+
 -------------------------------------------------------------------
 Fri Nov 17 09:50:18 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
 

libunbound-devel-mini.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package libunbound-devel-mini
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -22,7 +22,7 @@
 %bcond_without hardened_build
 #
 Name:           libunbound-devel-mini
-Version:        1.19.0
+Version:        1.19.1
 #!BcntSyncTag: unbound
 Release:        0
 Summary:        Just a devel package for build loops

unbound-1.19.0.tar.gz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:a97532468854c61c2de48ca4170de854fd3bc95c8043bb0cfb0fe26605966624
-size 6336113

unbound-1.19.0.tar.gz.asc

@@ -1,16 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAmVLTw8ACgkQn28cLX4E
-X431nQ//SskLEQLtcBZbVSwDwAekENU5GSG8WnfAoTO7XduAMkeRMT0P9sgaGDog
-VF4bj1OhZ7lReYf64m5Uu1/8IIXArlkn3NViCQOBj60cKE9Q0/adc0mk+03SHc+M
-TlG+LLN7Weg8VKao9fjftcto3CJ1VbkXBbwByzhVuvvAlSkUU5rnB0tMYras6mDl
-y39KUpInbQEhOMPsdov5pvkYxzLeoWpu+uM3Jy5asWG531bBO5TELpJTay3dRRyL
-NNCV+KQJazobWf01X7TkdAEd5f2xKf7NEawTuJFe8weIVG3kpJ8a86i1TUa6HXAR
-5HqCTGrVOXeNEBvY7Xya48Sbf1ae0ti1BcKmkUlhuWE8l6eXomZl14RtBSpdQYsF
-cWNOTg4pK1mstEyCk2sSpcdNpMX2tRDbsgmff9ookPtE3hdh1MVY54H0E/MzCRIm
-J5hu+UPuu4HJxlxozxrs+g0GbyDq8420p74M/pkQDAekSoCp1X8+yce/Izl1tBy8
-LCu8Izjky+6wLfx2+5FDPGusfqaQvNnQFXL710yagaVQULXT/PSyqnRGTNNynLmm
-xXJFQC+Nf4Ud72ma63gVTUC7SslAcYIUz6Ozo/7U6BXXnCu1S2W3ThGHBp4Wjlc8
-ZpLtQh6CFUIt5eDdVaj31+vaPWlShIY2THexl+ZPAXJjuUwzyf0=
-=Gtql
------END PGP SIGNATURE-----

unbound-1.19.1.tar.gz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:bc1d576f3dd846a0739adc41ffaa702404c6767d2b6082deb9f2f97cbb24a3a9
+size 6340435

unbound-1.19.1.tar.gz.asc

@@ -0,0 +1,16 @@
+-----BEGIN PGP SIGNATURE-----
+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+=nFuI
+-----END PGP SIGNATURE-----

unbound.changes

@@ -1,3 +1,12 @@
+-------------------------------------------------------------------
+Wed Feb 28 13:35:31 UTC 2024 - Pedro Monreal <pmonreal@suse.com>
+
+- Update to 1.19.1:
+  * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868]
+    - Fix CVE-2023-50387, DNSSEC verification complexity can be
+      exploited to exhaust CPU resources and stall DNS resolvers.
+    - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU.
+
 -------------------------------------------------------------------
 Fri Nov 17 09:50:18 UTC 2023 - Pedro Monreal <pmonreal@suse.com>
 

unbound.spec

@@ -1,7 +1,7 @@
 #
 # spec file for package unbound
 #
-# Copyright (c) 2023 SUSE LLC
+# Copyright (c) 2024 SUSE LLC
 #
 # All modifications and additions to the file contributed by third parties
 # remain the property of their copyright owners, unless otherwise agreed
@@ -33,7 +33,7 @@
 %define piddir /run
 
 Name:           unbound
-Version:        1.19.0
+Version:        1.19.1
 Release:        0
 BuildRequires:  flex
 BuildRequires:  ldns-devel >= %{ldns_version}