From b38609d64d0ea20f510d6a692d7114d9d331bd77 Mon Sep 17 00:00:00 2001 From: Matthias Fischer Date: Fri, 4 Oct 2024 10:41:17 +0200 Subject: [PATCH 1/2] unbound: Update to 1.21.1 For details see: https://nlnetlabs.nl/projects/unbound/download/#unbound-1-21-1 "Fix CVE-2024-8508, unbounded name compression could lead to denial of service." Signed-off-by: Matthias Fischer Signed-off-by: Michael Tremer --- config/rootfiles/common/unbound | 2 +- lfs/unbound | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound index 03e382d2e..1da88aa9d 100644 --- a/config/rootfiles/common/unbound +++ b/config/rootfiles/common/unbound @@ -11,7 +11,7 @@ etc/unbound/unbound.conf #usr/lib/libunbound.la #usr/lib/libunbound.so usr/lib/libunbound.so.8 -usr/lib/libunbound.so.8.1.28 +usr/lib/libunbound.so.8.1.29 #usr/lib/pkgconfig/libunbound.pc usr/sbin/unbound usr/sbin/unbound-anchor diff --git a/lfs/unbound b/lfs/unbound index f10fed82d..d8efaf872 100644 --- a/lfs/unbound +++ b/lfs/unbound @@ -24,7 +24,7 @@ include Config -VER = 1.21.0 +VER = 1.21.1 THISAPP = unbound-$(VER) DL_FILE = $(THISAPP).tar.gz @@ -40,7 +40,7 @@ objects = $(DL_FILE) $(DL_FILE) = $(DL_FROM)/$(DL_FILE) -$(DL_FILE)_BLAKE2 = f6dc7b60e0071d3a7e7e687eb76fd086590ac69da954775c85bd09d8caa5e0cc4181c97fc14a75d2235f3b182d2d5b0b9120e453beb4e112af67ac80216cfca9 +$(DL_FILE)_BLAKE2 = 4a14019a52c7f0641a6cfcb946be3016d9fd722acff7eeb5ea243808621af9fc05d2bb4dcba1024f134eb6ec609994e5a07b6c4b6bc0b8cc639b35db1546acd1 install : $(TARGET) From 74f5f41372571c29b80db217a3d852ef0e613c6f Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Fri, 4 Oct 2024 11:46:22 +0000 Subject: [PATCH 2/2] core189: Ship and restart Unbound Signed-off-by: Michael Tremer --- config/rootfiles/core/189/filelists/unbound | 1 + config/rootfiles/core/189/update.sh | 1 + 2 files changed, 2 insertions(+) create mode 120000 config/rootfiles/core/189/filelists/unbound diff --git a/config/rootfiles/core/189/filelists/unbound b/config/rootfiles/core/189/filelists/unbound new file mode 120000 index 000000000..66adf0924 --- /dev/null +++ b/config/rootfiles/core/189/filelists/unbound @@ -0,0 +1 @@ +../../../common/unbound \ No newline at end of file diff --git a/config/rootfiles/core/189/update.sh b/config/rootfiles/core/189/update.sh index 43323f38a..cae569b80 100644 --- a/config/rootfiles/core/189/update.sh +++ b/config/rootfiles/core/189/update.sh @@ -349,6 +349,7 @@ ldconfig telinit u # Start services +/etc/init.d/unbound restart /etc/init.d/collectd restart /usr/local/bin/openvpnctrl -s /usr/local/bin/openvpnctrl -sn2n