rpms/unbound
6
0
Fork 0
Code Issues Pull Requests Releases Activity

import UBI unbound-1.16.2-5.9.el8_10

Browse Source
This commit is contained in:
eabdullin 2025-07-28 12:23:08 +00:00
parent 922840efb9
commit 1cf94b6e37
2 changed files with 2270 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2255
SOURCES/unbound-1.23.1-CVE-2025-5994.patch Normal file
View File

File diff suppressed because it is too large Load Diff

16
SPECS/unbound.spec
View File

@ -34,7 +34,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound Name: unbound
Version: 1.16.2 Version: 1.16.2
Release: 5.8%{?extra_version:.%{extra_version}}%{?dist} Release: 5.9%{?extra_version:.%{extra_version}}%{?dist}
License: BSD License: BSD
Url: https://www.unbound.net/ Url: https://www.unbound.net/
Source: https://www.unbound.net/downloads/%{name}-%{version}%{?extra_version}.tar.gz Source: https://www.unbound.net/downloads/%{name}-%{version}%{?extra_version}.tar.gz
@ -67,6 +67,15 @@ Patch3: unbound-1.16-CVE-2022-3204.patch
Patch4: unbound-1.16-CVE-2023-50387-CVE-2023-50868.patch Patch4: unbound-1.16-CVE-2023-50387-CVE-2023-50868.patch
# https://github.com/NLnetLabs/unbound/commit/b7c61d7cc256d6a174e6179622c7fa968272c259 # https://github.com/NLnetLabs/unbound/commit/b7c61d7cc256d6a174e6179622c7fa968272c259
Patch5: unbound-1.21-CVE-2024-8508.patch Patch5: unbound-1.21-CVE-2024-8508.patch
# The patch for CVE-2025-5994 requires certain changes fixing bugs in subnet module
# that is why we have to backport these commits. They have their respective tests
# backported with them.
# https://github.com/NLnetLabs/unbound/commit/0f08cc6d5577ad4747749c55229e16df8711ee32
# https://github.com/NLnetLabs/unbound/commit/6d0812b56731af130e8bc7e1572388934beb9b3b
# https://github.com/NLnetLabs/unbound/commit/be626f7c5330dc414a582a04b537ea79d5c452fb
# https://github.com/NLnetLabs/unbound/commit/5bf82f246481098a6473f296b21fc1229d276c0f
# https://github.com/NLnetLabs/unbound/commit/a1150078f29e14b36c8e4d9d05a263a5e6abbc5b
Patch6: unbound-1.23.1-CVE-2025-5994.patch
BuildRequires: gdb BuildRequires: gdb
BuildRequires: gcc, make BuildRequires: gcc, make
@ -171,6 +180,7 @@ pushd %{pkgname}
%patch3 -p2 -b .CVE-2022-3204 %patch3 -p2 -b .CVE-2022-3204
%patch4 -p2 -b .CVE-2023-50387-CVE-2023-50868 %patch4 -p2 -b .CVE-2023-50387-CVE-2023-50868
%patch5 -p2 -b .CVE-2024-8508 %patch5 -p2 -b .CVE-2024-8508
%patch6 -p2 -b .CVE-2025-5994
# copy common doc files - after here, since it may be patched # copy common doc files - after here, since it may be patched
@ -438,6 +448,10 @@ popd
%verify(not md5 size mtime) %{_sharedstatedir}/%{name}/root.key %verify(not md5 size mtime) %{_sharedstatedir}/%{name}/root.key
%changelog %changelog
* Thu Jul 24 2025 Tomas Korbar <tkorbar@redhat.com> - 1.16.2-5.9
- Fix RebirthDay Attack (CVE-2025-5994)
- Resolves: RHEL-104123
* Tue Nov 12 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-5.8 * Tue Nov 12 2024 Petr Menšík <pemensik@redhat.com> - 1.16.2-5.8
- Prevent unbounded name compression (CVE-2024-8508) - Prevent unbounded name compression (CVE-2024-8508)