diff --git a/libunbound-devel-mini.changes b/libunbound-devel-mini.changes index 9c15632..1a74815 100644 --- a/libunbound-devel-mini.changes +++ b/libunbound-devel-mini.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Wed Feb 28 13:35:31 UTC 2024 - Pedro Monreal + +- Update to 1.19.1: + * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868] + - Fix CVE-2023-50387, DNSSEC verification complexity can be + exploited to exhaust CPU resources and stall DNS resolvers. + - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. + ------------------------------------------------------------------- Fri Nov 17 09:50:18 UTC 2023 - Pedro Monreal diff --git a/libunbound-devel-mini.spec b/libunbound-devel-mini.spec index e75d962..12289f8 100644 --- a/libunbound-devel-mini.spec +++ b/libunbound-devel-mini.spec @@ -1,7 +1,7 @@ # # spec file for package libunbound-devel-mini # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -22,7 +22,7 @@ %bcond_without hardened_build # Name: libunbound-devel-mini -Version: 1.19.0 +Version: 1.19.1 #!BcntSyncTag: unbound Release: 0 Summary: Just a devel package for build loops diff --git a/unbound-1.19.0.tar.gz b/unbound-1.19.0.tar.gz deleted file mode 100644 index eae6071..0000000 --- a/unbound-1.19.0.tar.gz +++ /dev/null @@ -1,3 +0,0 @@ -version https://git-lfs.github.com/spec/v1 -oid sha256:a97532468854c61c2de48ca4170de854fd3bc95c8043bb0cfb0fe26605966624 -size 6336113 diff --git a/unbound-1.19.0.tar.gz.asc b/unbound-1.19.0.tar.gz.asc deleted file mode 100644 index 9636a34..0000000 --- a/unbound-1.19.0.tar.gz.asc +++ /dev/null @@ -1,16 +0,0 @@ ------BEGIN PGP SIGNATURE----- - -iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAmVLTw8ACgkQn28cLX4E -X431nQ//SskLEQLtcBZbVSwDwAekENU5GSG8WnfAoTO7XduAMkeRMT0P9sgaGDog -VF4bj1OhZ7lReYf64m5Uu1/8IIXArlkn3NViCQOBj60cKE9Q0/adc0mk+03SHc+M -TlG+LLN7Weg8VKao9fjftcto3CJ1VbkXBbwByzhVuvvAlSkUU5rnB0tMYras6mDl -y39KUpInbQEhOMPsdov5pvkYxzLeoWpu+uM3Jy5asWG531bBO5TELpJTay3dRRyL -NNCV+KQJazobWf01X7TkdAEd5f2xKf7NEawTuJFe8weIVG3kpJ8a86i1TUa6HXAR -5HqCTGrVOXeNEBvY7Xya48Sbf1ae0ti1BcKmkUlhuWE8l6eXomZl14RtBSpdQYsF -cWNOTg4pK1mstEyCk2sSpcdNpMX2tRDbsgmff9ookPtE3hdh1MVY54H0E/MzCRIm -J5hu+UPuu4HJxlxozxrs+g0GbyDq8420p74M/pkQDAekSoCp1X8+yce/Izl1tBy8 -LCu8Izjky+6wLfx2+5FDPGusfqaQvNnQFXL710yagaVQULXT/PSyqnRGTNNynLmm -xXJFQC+Nf4Ud72ma63gVTUC7SslAcYIUz6Ozo/7U6BXXnCu1S2W3ThGHBp4Wjlc8 -ZpLtQh6CFUIt5eDdVaj31+vaPWlShIY2THexl+ZPAXJjuUwzyf0= -=Gtql ------END PGP SIGNATURE----- diff --git a/unbound-1.19.1.tar.gz b/unbound-1.19.1.tar.gz new file mode 100644 index 0000000..d815e0f --- /dev/null +++ b/unbound-1.19.1.tar.gz @@ -0,0 +1,3 @@ +version https://git-lfs.github.com/spec/v1 +oid sha256:bc1d576f3dd846a0739adc41ffaa702404c6767d2b6082deb9f2f97cbb24a3a9 +size 6340435 diff --git a/unbound-1.19.1.tar.gz.asc b/unbound-1.19.1.tar.gz.asc new file mode 100644 index 0000000..10637a5 --- /dev/null +++ b/unbound-1.19.1.tar.gz.asc @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCAAdFiEE7fqj8spObrBWga+On28cLX4EX40FAmXLWyEACgkQn28cLX4E +X42koxAAnHtiFXYUs7DVzxRd3ZtIxTbhedtJvBzQCT3BkbwfweWNongKOirJU6zP +tMNnBX6xi73cJes6pjgNVnKvSHWA5GxdlYpK3k41o9r4IgOkr1xomAT1HUb0BuVY +bULbObWpImlA4U75z+EQBBh7YqkXiZRwlzQp2TEXc96CTED2y9pRhPjDcCV7PbKJ +NqXcNrvBgaMPEdEbhKRojxdvjd42erte6HbLbXJESRaZWd+w363qbshdVYk5KFON +beivZtLquLuaxYwC/oblyJglKxUmPtp1Ts/wbqoW2qAaCEXlRs3YzMQUkqrndpsk +c97EC6WReoyvKmtWwKA13/nBjSAbfwSEOTj3qTWadbkX3F82oFVmiZcI+70Jg/Zs +VI7jdmLxZ/5UVL6vTy2nQHvA43Sn4XB/HosqC7x/XKgZE42Xw6J4ou9ibuNfHKJM +IAU+HTSmRI4sS7Kxqgc6a213eJ7l8qmAW0US9WxO4k8uzIozek263I9obO2+BnVV +brOIcJkGHMNnqA92Hzd8pXJStMYP6aHMfdTmIk0YyrHGC1oxANuYWbafoiIAetOG +H/atC2Z84+TeNl5uSFRdjiANwf3lA3tApfVUw/lm1+lzZ7TnYg9MBDCB+/0iwx+9 +4vXE8SD+v1nzAYIJYUtwxc16E2Su7mJ4qIq0cZ8VOm2sw5CgmmI= +=nFuI +-----END PGP SIGNATURE----- diff --git a/unbound.changes b/unbound.changes index 8303a22..8bfbe54 100644 --- a/unbound.changes +++ b/unbound.changes @@ -1,3 +1,12 @@ +------------------------------------------------------------------- +Wed Feb 28 13:35:31 UTC 2024 - Pedro Monreal + +- Update to 1.19.1: + * Bug Fixes: [bsc#1219823, CVE-2023-50387][bsc#1219826, CVE-2023-50868] + - Fix CVE-2023-50387, DNSSEC verification complexity can be + exploited to exhaust CPU resources and stall DNS resolvers. + - Fix CVE-2023-50868, NSEC3 closest encloser proof can exhaust CPU. + ------------------------------------------------------------------- Fri Nov 17 09:50:18 UTC 2023 - Pedro Monreal diff --git a/unbound.spec b/unbound.spec index e8932d0..adcca8f 100644 --- a/unbound.spec +++ b/unbound.spec @@ -1,7 +1,7 @@ # # spec file for package unbound # -# Copyright (c) 2023 SUSE LLC +# Copyright (c) 2024 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed @@ -33,7 +33,7 @@ %define piddir /run Name: unbound -Version: 1.19.0 +Version: 1.19.1 Release: 0 BuildRequires: flex BuildRequires: ldns-devel >= %{ldns_version}