From 032e91d9ea7487e6c2adbce57cd60f21cb8f0cc3 Mon Sep 17 00:00:00 2001 From: Bernd Kuhls Date: Sat, 6 Dec 2025 14:10:44 +0100 Subject: [PATCH] package/unbound: security bump version to 1.24.2 Changelog: https://nlnetlabs.nl/projects/unbound/download/ Fixes CVE-2025-11411: https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt Removed UNBOUND_IGNORE_CVES, the fix is included in this release. The unbound version 1.23.0 also includes a fix when compiling with gcc 15. See: https://github.com/NLnetLabs/unbound/pull/1262 Fixes: https://autobuild.buildroot.net/results/d3d/d3d6b84ba667e3e2586b7cfdaddcd160232eddfd/ Signed-off-by: Bernd Kuhls [Julien: add comment about gcc-15 fix] Signed-off-by: Julien Olivain (cherry picked from commit a1f691fb020067031dd020d6c844a4be43061e42) Signed-off-by: Thomas Perale --- package/unbound/unbound.hash | 6 +++--- package/unbound/unbound.mk | 5 +---- 2 files changed, 4 insertions(+), 7 deletions(-) diff --git a/package/unbound/unbound.hash b/package/unbound/unbound.hash index d9397f698a..19966d889e 100644 --- a/package/unbound/unbound.hash +++ b/package/unbound/unbound.hash @@ -1,8 +1,8 @@ -# From https://nlnetlabs.nl/downloads/unbound/unbound-1.21.1.tar.gz.sha256 +# From https://nlnetlabs.nl/downloads/unbound/unbound-1.24.2.tar.gz.sha256 # After checking pgp signature from: -# https://nlnetlabs.nl/downloads/unbound/unbound-1.21.1.tar.gz.asc +# https://nlnetlabs.nl/downloads/unbound/unbound-1.24.2.tar.gz.asc # with key: 948EB42322C5D00B79340F5DCFF3344D9087A490 -sha256 3036d23c23622b36d3c87e943117bdec1ac8f819636eb978d806416b0fa9ea46 unbound-1.21.1.tar.gz +sha256 44e7b53e008a6dcaec03032769a212b46ab5c23c105284aa05a4f3af78e59cdb unbound-1.24.2.tar.gz # Locally calculated sha256 8eb9a16cbfb8703090bbfa3a2028fd46bb351509a2f90dc1001e51fbe6fd45db LICENSE diff --git a/package/unbound/unbound.mk b/package/unbound/unbound.mk index e9a32e6129..b435839020 100644 --- a/package/unbound/unbound.mk +++ b/package/unbound/unbound.mk @@ -4,7 +4,7 @@ # ################################################################################ -UNBOUND_VERSION = 1.21.1 +UNBOUND_VERSION = 1.24.2 UNBOUND_SITE = https://nlnetlabs.nl/downloads/unbound UNBOUND_INSTALL_STAGING = YES UNBOUND_DEPENDENCIES = host-pkgconf expat libevent openssl @@ -23,9 +23,6 @@ UNBOUND_CONF_OPTS = \ --with-libexpat=$(STAGING_DIR)/usr \ --with-ssl=$(STAGING_DIR)/usr -# Only vulnerable if built with --enable-subnet -UNBOUND_IGNORE_CVES += CVE-2025-5994 - ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y) UNBOUND_CONF_OPTS += --with-pthreads else