Attachment 249002 Details for Bug 277555 – patch to upgrade

[patch] patch to upgrade

0001-Update-to-unbound-1.19.2.patch (text/plain), 2.64 KB, created by Jaap Akkerhuis on 2024-03-07 18:42:16 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jaap Akkerhuis

Created: 2024-03-07 18:42:16 UTC

Size: 2.64 KB

patch

obsolete

>From 2b9868cce022bbbe5031a7b17b0e3ca5a011dab7 Mon Sep 17 00:00:00 2001
>From: Jaap Akkerhuis <jaap@NLnetLabs.nl>
>Date: Thu, 7 Mar 2024 19:23:43 +0100
>Subject: [PATCH] Update to unbound-1.19.2
>
>---
> dns/unbound/Makefile         |  2 +-
> dns/unbound/distinfo         |  6 +++---
> dns/unbound/pkg-plist        |  2 +-
> security/vuxml/vuln/2024.xml | 26 ++++++++++++++++++++++++++
> 4 files changed, 31 insertions(+), 5 deletions(-)
>
>diff --git a/dns/unbound/Makefile b/dns/unbound/Makefile
>index 4ae9d9af262..21e91e0dd02 100644
>--- a/dns/unbound/Makefile
>+++ b/dns/unbound/Makefile
>@@ -1,5 +1,5 @@
> PORTNAME=	unbound
>-DISTVERSION=	1.19.1
>+DISTVERSION=	1.19.2
> CATEGORIES=	dns
> MASTER_SITES=	https://www.nlnetlabs.nl/downloads/unbound/
> 
>diff --git a/dns/unbound/distinfo b/dns/unbound/distinfo
>index 885164c792f..18738f9403f 100644
>--- a/dns/unbound/distinfo
>+++ b/dns/unbound/distinfo
>@@ -1,3 +1,3 @@
>-TIMESTAMP = 1707886312
>-SHA256 (unbound-1.19.1.tar.gz) = bc1d576f3dd846a0739adc41ffaa702404c6767d2b6082deb9f2f97cbb24a3a9
>-SIZE (unbound-1.19.1.tar.gz) = 6340435
>+TIMESTAMP = 1709823213
>+SHA256 (unbound-1.19.2.tar.gz) = cc560d345734226c1b39e71a769797e7fdde2265cbb77ebce542704bba489e55
>+SIZE (unbound-1.19.2.tar.gz) = 6340281
>diff --git a/dns/unbound/pkg-plist b/dns/unbound/pkg-plist
>index fc24817f9c0..a16feb41565 100644
>--- a/dns/unbound/pkg-plist
>+++ b/dns/unbound/pkg-plist
>@@ -5,7 +5,7 @@ libdata/pkgconfig/libunbound.pc
> lib/libunbound.a
> lib/libunbound.so
> lib/libunbound.so.8
>-lib/libunbound.so.8.1.24
>+lib/libunbound.so.8.1.25
> %%PYTHON%%%%PYTHON_SITELIBDIR%%/_unbound.so
> %%PYTHON%%%%PYTHON_SITELIBDIR%%/unbound.py
> %%PYTHON%%%%PYTHON_SITELIBDIR%%/unboundmodule.py
>diff --git a/security/vuxml/vuln/2024.xml b/security/vuxml/vuln/2024.xml
>index 8a4b3ed3783..9eb16139592 100644
>--- a/security/vuxml/vuln/2024.xml
>+++ b/security/vuxml/vuln/2024.xml
>@@ -1,3 +1,29 @@
>+  <vuln vid="f962ab75-b8b4-4dba-8366-5f93fd525e7e">
>+    <topic>unbound--Denial of service when trimming EDE text on positive replies</topic>
>+    <affects>
>+      <package>
>+	<name>unbound</name>
>+	<range><lt></lt></range>
>+      </package>
>+    </affects>
>+    <description>
>+	<body xmlns="http://www.w3.org/1999/xhtml">
>+	<p>SO-AND-SO reports:</p>
>+	<blockquote cite="INSERT URL HERE">
>+	  <p>.</p>
>+	</blockquote>
>+	</body>
>+    </description>
>+    <references>
>+      <cvename>CVE-2024-1931</cvename>
>+      <url>INSERT BLOCKQUOTE URL HERE</url>
>+    </references>
>+    <dates>
>+      <discovery>2024-03-07</discovery>
>+      <entry>2024-03-07</entry>
>+    </dates>
>+  </vuln>
>+
>   <vuln vid="e74da31b-276a-4a22-9772-17dd42b97559">
>     <topic>electron{27,28} -- vulnerability in libxml2</topic>
>     <affects>
>-- 
>2.43.2
>

Flags:

jaap: maintainer-approval+

Actions: View | Diff

Attachments on bug 277555: 249002