packages/unbound
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix CVE-2023-50387 CVE-2023-50868

Browse Source 
(cherry picked from commit 75ddb133697ff2dc97e2a648921d680def0ef483)
This commit is contained in:
eaglegai 2024-02-23 06:22:18 +00:00 committed by openeuler-sync-bot
parent c6e52e672b
commit 230070f675
2 changed files with 2353 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2345
backport-CVE-2023-50387_CVE-2023-50868.patch Normal file
View File

File diff suppressed because it is too large Load Diff

9
unbound.spec
View File

@ -2,7 +2,7 @@
Name: unbound Name: unbound
Version: 1.13.2 Version: 1.13.2
Release: 8 Release: 9
Summary: Unbound is a validating, recursive, caching DNS resolver Summary: Unbound is a validating, recursive, caching DNS resolver
License: BSD License: BSD
Url: https://nlnetlabs.nl/projects/unbound/about/ Url: https://nlnetlabs.nl/projects/unbound/about/
@ -27,6 +27,7 @@ Patch2: backport-CVE-2022-30698-and-CVE-2022-30699.patch
Patch3: backport-CVE-2022-3204.patch Patch3: backport-CVE-2022-3204.patch
Patch4: backport-Undefine-shift-in-sldns_str2wire_hip_buf.patch Patch4: backport-Undefine-shift-in-sldns_str2wire_hip_buf.patch
Patch5: backport-Integer-overflow-in-sldns_wire2str_pkt_scan.patch Patch5: backport-Integer-overflow-in-sldns_wire2str_pkt_scan.patch
Patch6: backport-CVE-2023-50387_CVE-2023-50868.patch
BuildRequires: make flex swig pkgconfig systemd BuildRequires: make flex swig pkgconfig systemd
BuildRequires: libevent-devel expat-devel openssl-devel python3-devel BuildRequires: libevent-devel expat-devel openssl-devel python3-devel
@ -243,6 +244,12 @@ popd
%{_mandir}/man* %{_mandir}/man*
%changelog %changelog
* Fri Feb 23 2024 gaihuiying <eaglegai@163.com> - 1.13.2-9
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868
* Fri Mar 03 2023 gaihuiying <eaglegai@163.com> - 1.13.2-8 * Fri Mar 03 2023 gaihuiying <eaglegai@163.com> - 1.13.2-8
- Type:bugfix - Type:bugfix
- CVE:NA - CVE:NA