T.J. Townsend pushed to branch main at Arch Linux / Packaging / Packages / unbound
Commits: 6f88b7fd by T.J. Townsend at 2024-10-03T15:39:17-04:00 upgpkg: 1.21.0-2: temporary fix for CVE-2024-8508 - - - - - 2 changed files: - .SRCINFO - PKGBUILD Changes: ===================================== .SRCINFO ===================================== @@ -1,7 +1,7 @@ pkgbase = unbound pkgdesc = Validating, recursive, and caching DNS resolver pkgver = 1.21.0 - pkgrel = 1 + pkgrel = 2 url = https://unbound.net/ arch = x86_64 license = BSD-3-Clause ===================================== PKGBUILD ===================================== @@ -7,7 +7,7 @@ pkgname=unbound pkgver=1.21.0 -pkgrel=1 +pkgrel=2 pkgdesc="Validating, recursive, and caching DNS resolver" arch=(x86_64) url="https://unbound.net/" @@ -61,6 +61,8 @@ prepare() { # enable trusted-anchor-file and set it to an unbound specific location patch -p1 -d $pkgname -i ../$pkgname-1.14.0-trust_anchor_file.patch cd $pkgname + # CVE-2024-8508 (temporary fix) + git cherry-pick -n b7c61d7cc256d6a174e6179622c7fa968272c259 autoreconf -fiv } View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/unbound/-/commit/6f88b7fd6f57b697b1082412c2ca5af032b73a09 -- View it on GitLab: https://gitlab.archlinux.org/archlinux/packaging/packages/unbound/-/commit/6f88b7fd6f57b697b1082412c2ca5af032b73a09 You're receiving this email because of your account on gitlab.archlinux.org.