CVS commit: [pkgsrc-2025Q2] pkgsrc/net/unbound

["Maya Rashish" <maya%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   maya
Date:           Thu Jul 24 22:29:41 UTC 2025

Modified Files:
        pkgsrc/net/unbound [pkgsrc-2025Q2]: Makefile distinfo

Log Message:
Pullup ticket #6998 - requested by taca
net/unbound: Security fix

Revisions pulled up:
- net/unbound/Makefile                                          1.127
- net/unbound/distinfo                                          1.86

---
   Module Name: pkgsrc
   Committed By:        he
   Date:                Wed Jul 16 21:53:27 UTC 2025

   Modified Files:
        pkgsrc/net/unbound: Makefile distinfo

   Log Message:
   Update net/unbound to version 1.23.1.

   Pkgsrc changes:
    * Adjust checksums

   Upstream changes:

   This security release fixes the Rebirthday Attack CVE-2025-5994.

   This re-opens up resolvers to a birthday paradox, for EDNS client
   subnet servers that respond with non-ECS answers. It only affects
   Unbound when compiled with --enable-subnet, and subnetmod is enabled
   with config options that send ECS information to upstream servers.

   The CVE is described here
   https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

   We would like to thank Xiang Li (AOSP Lab, Nankai University) for
   discovering and responsibly disclosing the vulnerability.


To generate a diff of this commit:
cvs rdiff -u -r1.125 -r1.125.2.1 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.85 -r1.85.2.1 pkgsrc/net/unbound/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.125 pkgsrc/net/unbound/Makefile:1.125.2.1
--- pkgsrc/net/unbound/Makefile:1.125   Thu Apr 24 21:29:08 2025
+++ pkgsrc/net/unbound/Makefile Thu Jul 24 22:29:41 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.125 2025/04/24 21:29:08 he Exp $
+# $NetBSD: Makefile,v 1.125.2.1 2025/07/24 22:29:41 maya Exp $
 
-DISTNAME=      unbound-1.23.0
+DISTNAME=      unbound-1.23.1
 CATEGORIES=    net
 MASTER_SITES=  https://nlnetlabs.nl/downloads/unbound/
 

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.85 pkgsrc/net/unbound/distinfo:1.85.2.1
--- pkgsrc/net/unbound/distinfo:1.85    Thu Apr 24 21:29:08 2025
+++ pkgsrc/net/unbound/distinfo Thu Jul 24 22:29:41 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.85 2025/04/24 21:29:08 he Exp $
+$NetBSD: distinfo,v 1.85.2.1 2025/07/24 22:29:41 maya Exp $
 
-BLAKE2s (unbound-1.23.0.tar.gz) = 8bbb0f4887b103c362ebbae5ac4d3b5c20230a443a38e5d27a50377db82c3a75
-SHA512 (unbound-1.23.0.tar.gz) = 9b5ca48f4f5189f168f76396f5895f39262a4333e589f8c64bb9298a55c6266f626a4a4399370c68edd9f6318215a401146bf9e16a101c54decf623668a398af
-Size (unbound-1.23.0.tar.gz) = 6770860 bytes
+BLAKE2s (unbound-1.23.1.tar.gz) = c33081f2cd1aaa9ec7fce2233670b87eb7f7488d5eb6e22dbf25accb8141ff85
+SHA512 (unbound-1.23.1.tar.gz) = b31858eb03fed1fb2aead03aa5b6f32476678067c28ff4816808cbdcae32591e36bee966b25c6b702e3fb51588ae467efab7934a24971193f1183edd5c561b7b
+Size (unbound-1.23.1.tar.gz) = 6771025 bytes
 SHA1 (patch-configure) = 0779bb9174e358163430fa0b05e81c464776b12f