CVS commit: pkgsrc/net/unbound

["Havard Eidnes" <he%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   he
Date:           Wed Oct 22 12:11:48 UTC 2025

Modified Files:
        pkgsrc/net/unbound: Makefile distinfo

Log Message:
Update net/unbound to version 1.24.1.

Pkgsrc changes:
 * Adjust checksums

Upstream changes:

This security release fixes CVE-2025-11411.

Promiscuous NS RRSets that complement DNS replies in the authority
section can be used to trick resolvers to update their delegation
information for the zone.

The CVE is described here
https://nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt

We would like to thank Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin
Duan from Tsinghua University for discovering and responsibly
disclosing the vulnerability.

Bug Fixes:
- Fix CVE-2025-11411 (possible domain hijacking attack), reported by
  Yuxiao Wu, Yunyi Zhang, Baojun Liu and Haixin Duan from Tsinghua
  University.


To generate a diff of this commit:
cvs rdiff -u -r1.129 -r1.130 pkgsrc/net/unbound/Makefile
cvs rdiff -u -r1.87 -r1.88 pkgsrc/net/unbound/distinfo

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.

Modified files:

Index: pkgsrc/net/unbound/Makefile
diff -u pkgsrc/net/unbound/Makefile:1.129 pkgsrc/net/unbound/Makefile:1.130
--- pkgsrc/net/unbound/Makefile:1.129   Wed Oct  1 08:18:41 2025
+++ pkgsrc/net/unbound/Makefile Wed Oct 22 12:11:48 2025
@@ -1,6 +1,6 @@
-# $NetBSD: Makefile,v 1.129 2025/10/01 08:18:41 adam Exp $
+# $NetBSD: Makefile,v 1.130 2025/10/22 12:11:48 he Exp $
 
-DISTNAME=      unbound-1.24.0
+DISTNAME=      unbound-1.24.1
 CATEGORIES=    net
 MASTER_SITES=  https://nlnetlabs.nl/downloads/unbound/
 

Index: pkgsrc/net/unbound/distinfo
diff -u pkgsrc/net/unbound/distinfo:1.87 pkgsrc/net/unbound/distinfo:1.88
--- pkgsrc/net/unbound/distinfo:1.87    Wed Oct  1 08:18:41 2025
+++ pkgsrc/net/unbound/distinfo Wed Oct 22 12:11:48 2025
@@ -1,6 +1,6 @@
-$NetBSD: distinfo,v 1.87 2025/10/01 08:18:41 adam Exp $
+$NetBSD: distinfo,v 1.88 2025/10/22 12:11:48 he Exp $
 
-BLAKE2s (unbound-1.24.0.tar.gz) = d6610eefbefa340040aea88c746cb165af1aad20093468319711555a868859e2
-SHA512 (unbound-1.24.0.tar.gz) = ca2adb421bb7ebf636d1442d684b5f43bf5db7c778d9ca159635b67212294bb499aa451b79f244acbea36106db7242ed1afb72fcf425fec57c0eff5f19866ae3
-Size (unbound-1.24.0.tar.gz) = 6896053 bytes
+BLAKE2s (unbound-1.24.1.tar.gz) = e7e622f37594c9cabb673623f8c3a3626e56172eafb7ceedf71fb8839ce8ac48
+SHA512 (unbound-1.24.1.tar.gz) = 0332053ff6b2a2b6743fe33460950780a26e2cad236d21a9219e7b1a04576a9887342d59bc244c02c405e93812168175bc3dbe5481a201296899e77cbd201ea5
+Size (unbound-1.24.1.tar.gz) = 6902613 bytes
 SHA1 (patch-configure) = 0779bb9174e358163430fa0b05e81c464776b12f