packages/unbound
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

!85 [sync] PR-81: fix CVE-2023-50387 CVE-2023-50868

Browse Source 
From: @openeuler-sync-bot 
Reviewed-by: @gebidelidaye 
Signed-off-by: @gebidelidaye
This commit is contained in:
openeuler-ci-bot 2024-02-26 07:07:46 +00:00 committed by Gitee
commit af35215d9d
No known key found for this signature in database
GPG Key ID: 173E9B9CA92EEF8F
2 changed files with 2353 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2345
backport-CVE-2023-50387_CVE-2023-50868.patch Normal file
View File

File diff suppressed because it is too large Load Diff

9
unbound.spec
View File

@ -2,7 +2,7 @@
Name: unbound Name: unbound
Version: 1.13.2 Version: 1.13.2
Release: 8 Release: 9
Summary: Unbound is a validating, recursive, caching DNS resolver Summary: Unbound is a validating, recursive, caching DNS resolver
License: BSD License: BSD
Url: https://nlnetlabs.nl/projects/unbound/about/ Url: https://nlnetlabs.nl/projects/unbound/about/
@ -27,6 +27,7 @@ Patch2: backport-CVE-2022-30698-and-CVE-2022-30699.patch
Patch3: backport-CVE-2022-3204.patch Patch3: backport-CVE-2022-3204.patch
Patch4: backport-Undefine-shift-in-sldns_str2wire_hip_buf.patch Patch4: backport-Undefine-shift-in-sldns_str2wire_hip_buf.patch
Patch5: backport-Integer-overflow-in-sldns_wire2str_pkt_scan.patch Patch5: backport-Integer-overflow-in-sldns_wire2str_pkt_scan.patch
Patch6: backport-CVE-2023-50387_CVE-2023-50868.patch
BuildRequires: make flex swig pkgconfig systemd BuildRequires: make flex swig pkgconfig systemd
BuildRequires: libevent-devel expat-devel openssl-devel python3-devel BuildRequires: libevent-devel expat-devel openssl-devel python3-devel
@ -243,6 +244,12 @@ popd
%{_mandir}/man* %{_mandir}/man*
%changelog %changelog
* Fri Feb 23 2024 gaihuiying <eaglegai@163.com> - 1.13.2-9
- Type:bugfix
- CVE:NA
- SUG:NA
- DESC:fix CVE-2023-50387 CVE-2023-50868
* Fri Mar 03 2023 gaihuiying <eaglegai@163.com> - 1.13.2-8 * Fri Mar 03 2023 gaihuiying <eaglegai@163.com> - 1.13.2-8
- Type:bugfix - Type:bugfix
- CVE:NA - CVE:NA