public inbox for git-commits@fedoraproject.org
help / color / mirror / Atom feed
From: Fedor Vorobev <fvorobev@redhat.com>
To: git-commits@fedoraproject.org
Subject: [rpms/unbound] f43: Update to 1.26.1 (rhbz#2535076)
Date: Wed, 16 Sep 2026 12:00:08 GMT [thread overview]
Message-ID: <178956000885.1.8661815066746027128.rpms-unbound-a3d5c2547865@fedoraproject.org> (raw)
A new commit has been pushed.
Repo : rpms/unbound
Branch : f43
Commit : a3d5c25478656f3d35d8611499330865f7224225
Author : Fedor Vorobev <fvorobev@redhat.com>
Date : 2026-09-16T13:57:41+02:00
Stats : +4/-4 in 2 file(s)
URL : https://src.fedoraproject.org/rpms/unbound/c/a3d5c25478656f3d35d8611499330865f7224225?branch=f43
Log:
Update to 1.26.1 (rhbz#2535076)
Security fix list from upstream:
- Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code Execution when digesting DNSKEY. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report.
- Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC canonicalization. Thanks to Vlatko Kosturjak with Marlink Cyber for the report.
- Fix CVE-2026-82717, CNAME synthesis could lead to heap corruption. Thanks to Ben Morris from Anthropic for the report.
- Fix CVE-2026-77955, Possible ZONEMD verification bypass window. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab, In addition, thanks to Qifan Zhang from Palo Alto Networks for also reporting this issue.
- Fix CVE-2026-78227, Use-after-free in DoQ stream output buffer on reset re-transmission. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report.
- Fix CVE-2026-80225, Possible degradation of service from continuous queries on the same TCP/DoT connection. Thanks to Qifan Zhang from Palo Alto Networks for the report.
- Fix CVE-2026-82720, Use-after-free in DoH stream cleanup code path. Thanks to Yuqi Qiu and Xiang Li from Nankai University, AOSP Lab for the report.
- Fix CVE-2026-85501, Retrap: Novel Vulnerabilities to launch Algorithmic Complexity Attacks on DNSSEC. Thanks to Zuyao Xu and Xiang Li from Nankai University, AOSP Lab for report. In addition, thanks to Qifan Zhang from Palo Alto Networks for a complimentary report.
- Fix CVE-2026-77860, 'serve-expired' can bypass Unbound 'wait-limit'. Thanks to Xuanchao Xie, Lutong Chen, and Kaiping Xue from the University of Science and Technology of China (USTC) for the report.
---
diff --git a/sources b/sources
index e8b51b4..a77fb27 100644
--- a/sources
+++ b/sources
@@ -1,2 +1,2 @@
-SHA512 (unbound-1.26.0.tar.gz) = d061a4fd89b83e9e2c122b4479547f86548856710c801df01ce0aff8f0b4df9a61760cb7418b8ba7c79d504e6af49d7affc480f0730890bc818709007a931efd
-SHA512 (unbound-1.26.0.tar.gz.asc) = 9df080db5b74faeed42b8d03ca420aa9c276677f77472b0c02408fe2ca8c09e83667f11ff3349d379c1710aebadd0ff5d684cb993b855511031eade41bd0cb28
+SHA512 (unbound-1.26.1.tar.gz) = b0a02fe77e5d0ad697e950ee0c13b987f0f33b489dfe4bf4ed0b09723ca883ebe4465f69625b7d4eba8171516e6879bb07bf8c22b6e8bdd357e2f4f43e485525
+SHA512 (unbound-1.26.1.tar.gz.asc) = e68e349ffb76eb92b19a618be31d370879cdd42eaf9da0dbe854aa1b7637421846a2c0601198e118f66f49da25d921709dc48603ce9728155705ed7e5f25c5bf
diff --git a/unbound.spec b/unbound.spec
index 82856c6..1983309 100644
--- a/unbound.spec
+++ b/unbound.spec
@@ -42,7 +42,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound
-Version: 1.26.0
+Version: 1.26.1
Release: %autorelease %{?extra_version:-e %{extra_version}}
License: BSD-3-Clause
Url: https://nlnetlabs.nl/projects/unbound/
@@ -81,7 +81,7 @@ Source30: tmpfiles-unbound-libs.conf
Patch1: unbound-fedora-config.patch
# https://github.com/NLnetLabs/unbound/commit/8b33c5d7ffb82d442f3d19021588449cd6b02a17
Patch6: unbound-1.26.0-disabled-ipsecmod-fix.patch
-# https://github.com/cgallred/unbound/commit/93a56205cfa6b9a6d34db7245aa71e5ca67d1fd7
+# https://github.com/NLnetLabs/unbound/commit/93a56205cfa6b9a6d34db7245aa71e5ca67d1fd7
Patch7: unbound-1.26.0-replace-python2-c-api-macros.patch
BuildRequires: gcc, make
reply other threads:[~2026-09-16 12:00 UTC|newest]
Thread overview: [no followups] expand[flat|nested] mbox.gz Atom feed
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=178956000885.1.8661815066746027128.rpms-unbound-a3d5c2547865@fedoraproject.org \
--to=fvorobev@redhat.com \
--cc=git-commits@fedoraproject.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox