Jorik Cronenberg
8a50eab9a3
Security Fixes:
* Fix CVE-2024-8508, unbounded name compression could lead to
denial of service.
[CVE-2024-8508, bsc#1231284]
- Update keyring
OBS-URL: https://build.opensuse.org/package/show/server:dns/unbound?expand=0&rev=182
14 lines
345 B
SYSTEMD
14 lines
345 B
SYSTEMD
[Unit]
|
|
Description=daily update of the root trust anchor for DNSSEC
|
|
Documentation=man:unbound-anchor(8)
|
|
|
|
[Timer]
|
|
# Current DNSKEY TTL in root zone is 172800 seconds, i.e. 172800/60/60/24 = 2 days.
|
|
# It means that unboud-anchor should be run at least once a day.
|
|
OnCalendar=daily
|
|
Persistent=true
|
|
AccuracySec=24h
|
|
|
|
[Install]
|
|
WantedBy=timers.target
|