From unknown Fri Jun 20 18:20:08 2025 Content-Disposition: inline Content-Transfer-Encoding: quoted-printable MIME-Version: 1.0 X-Mailer: MIME-tools 5.509 (Entity 5.509) Content-Type: text/plain; charset=utf-8 From: bug#73621 <73621@debbugs.gnu.org> To: bug#73621 <73621@debbugs.gnu.org> Subject: Status: [PATCH] gnu: unbound: Update to 1.21.1. [security fixes] Reply-To: bug#73621 <73621@debbugs.gnu.org> Date: Sat, 21 Jun 2025 01:20:08 +0000 retitle 73621 [PATCH] gnu: unbound: Update to 1.21.1. [security fixes] reassign 73621 guix-patches submitter 73621 Ashish SHUKLA severity 73621 normal tag 73621 patch thanks From debbugs-submit-bounces@debbugs.gnu.org Thu Oct 03 19:39:14 2024 Received: (at submit) by debbugs.gnu.org; 3 Oct 2024 23:39:14 +0000 Received: from localhost ([127.0.0.1]:34081 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1swVPd-0003Py-N7 for submit@debbugs.gnu.org; Thu, 03 Oct 2024 19:39:14 -0400 Received: from lists.gnu.org ([209.51.188.17]:47658) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1swVPa-0003Pm-MP for submit@debbugs.gnu.org; Thu, 03 Oct 2024 19:39:11 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1swVPW-0006DS-N9 for guix-patches@gnu.org; Thu, 03 Oct 2024 19:39:06 -0400 Received: from anamika.lostca.se ([65.21.75.227]) by eggs.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_128_GCM_SHA256:128) (Exim 4.90_1) (envelope-from ) id 1swVPU-0002Wc-P2 for guix-patches@gnu.org; Thu, 03 Oct 2024 19:39:06 -0400 Received: from seneca.inet6.in (unknown [IPv6:2401:c080:3400:28a8:5400:5ff:fe16:9400]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) (Authenticated sender: abbe) by anamika.lostca.se (Postfix) with ESMTPSA id E91842FE86; Thu, 3 Oct 2024 23:39:00 +0000 (UTC) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=lostca.se; s=anamika; t=1727998741; h=from:from:reply-to:subject:subject:date:date:message-id:message-id: to:to:cc:cc:mime-version:mime-version:content-type:content-type: content-transfer-encoding:content-transfer-encoding; bh=N6dhaZtigLYIEzOhMsgPyRWp8KJhoDyY2jYA1yU11B8=; b=ol20wNyJon+dOkowRSEUxKUTNMiUCmxU1p9+/vTiAiaRLK5nluzZcG6ikvd0Y+0Q66lJsI //QAGgc8lArbdOYHH108KJYVY7WKz+xt5JgfWXvG+fvkmgXcUqsqUnkP3AihiOdJ4DzlJ/ vAgTpcdEqUAERwOrVoNXW0ZSuC2cdRA= From: Ashish SHUKLA To: guix-patches@gnu.org Subject: [PATCH] gnu: unbound: Update to 1.21.1. [security fixes] Date: Thu, 3 Oct 2024 23:38:40 +0000 Message-ID: <40d5e0dd94bca15ee13675dd285876569ae87bdc.1727998720.git.ashish.is@lostca.se> X-Mailer: git-send-email 2.46.1 MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Received-SPF: pass client-ip=65.21.75.227; envelope-from=ashish.is@lostca.se; helo=anamika.lostca.se X-Spam_score_int: -20 X-Spam_score: -2.1 X-Spam_bar: -- X-Spam_report: (-2.1 / 5.0 requ) BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, DKIM_VALID_EF=-0.1, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit Cc: Ashish SHUKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) This contains a fix for CVE-2024-8508. * gnu/packages/dns.scm (unbound): Update to 1.21.1. Change-Id: I2ed1806a0859c5dbd729d18a074220ab13b53223 --- gnu/packages/dns.scm | 5 +++-- 1 file changed, 3 insertions(+), 2 deletions(-) diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm index b2eda558df..1e9d1bc904 100644 --- a/gnu/packages/dns.scm +++ b/gnu/packages/dns.scm @@ -22,6 +22,7 @@ ;;; Copyright © 2023 Bruno Victal ;;; Copyright © 2023 Hilton Chain ;;; Copyright © 2024 John Kehayias +;;; Copyright © 2024 Ashish SHUKLA ;;; ;;; This file is part of GNU Guix. ;;; @@ -635,14 +636,14 @@ (define-public rbldnsd (define-public unbound (package (name "unbound") - (version "1.21.0") + (version "1.21.1") (source (origin (method url-fetch) (uri (string-append "https://www.unbound.net/downloads/unbound-" version ".tar.gz")) (sha256 - (base32 "08a5l5z0c99433pqg2i7x5d9m6as7c2z3sv4zakdy6zqn3bagp77")))) + (base32 "0ipam47nnh86v1wbjvk337wch6pcplbk353yr39kcav24cyd4dih")))) (build-system gnu-build-system) (outputs '("out" "python")) (native-inputs base-commit: ebb715aabfc4e59ed14b964ac7fdd2a9f9f44526 -- 2.46.1 From debbugs-submit-bounces@debbugs.gnu.org Sat Oct 05 11:55:41 2024 Received: (at submit) by debbugs.gnu.org; 5 Oct 2024 15:55:41 +0000 Received: from localhost ([127.0.0.1]:39437 helo=debbugs.gnu.org) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sx789-0007YT-6a for submit@debbugs.gnu.org; Sat, 05 Oct 2024 11:55:41 -0400 Received: from lists.gnu.org ([209.51.188.17]:43516) by debbugs.gnu.org with esmtp (Exim 4.84_2) (envelope-from ) id 1sx786-0007YL-QJ for submit@debbugs.gnu.org; Sat, 05 Oct 2024 11:55:39 -0400 Received: from eggs.gnu.org ([2001:470:142:3::10]) by lists.gnu.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_GCM_SHA384:256) (Exim 4.90_1) (envelope-from ) id 1sx781-00045N-Gm for guix-patches@gnu.org; Sat, 05 Oct 2024 11:55:33 -0400 Received: from smtp21.cstnet.cn ([159.226.251.21] helo=cstnet.cn) by eggs.gnu.org with esmtps (TLS1.2:DHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.90_1) (envelope-from ) id 1sx77z-0008VZ-GV for guix-patches@gnu.org; Sat, 05 Oct 2024 11:55:33 -0400 Received: from m (unknown [107.174.64.25]) by APP-01 (Coremail) with SMTP id qwCowADX3ytmYQFnO57zAw--.10846S2; Sat, 05 Oct 2024 23:55:23 +0800 (CST) From: Zheng Junjie To: Ashish SHUKLA via Guix-patches via Subject: Re: [bug#73621] [PATCH] gnu: unbound: Update to 1.21.1. [security fixes] In-Reply-To: <40d5e0dd94bca15ee13675dd285876569ae87bdc.1727998720.git.ashish.is@lostca.se> (Ashish SHUKLA via Guix-patches via's message of "Thu, 3 Oct 2024 23:38:40 +0000") References: <40d5e0dd94bca15ee13675dd285876569ae87bdc.1727998720.git.ashish.is@lostca.se> Date: Sat, 05 Oct 2024 23:55:17 +0800 Message-ID: <87y132tuhm.fsf@iscas.ac.cn> MIME-Version: 1.0 Content-Type: multipart/signed; boundary="=-=-="; micalg=pgp-sha512; protocol="application/pgp-signature" X-CM-TRANSID: qwCowADX3ytmYQFnO57zAw--.10846S2 X-Coremail-Antispam: 1UD129KBjvJXoW7tw1ktr4ftry5AFW5Zr18Zrb_yoW8Gw4xpF nxA3Wqqw1Sg34Fgay2gF47Kr4Yqa93tF1DW34DAa13JrZF9rZ29rWYqFWrGFnrJw109w47 uFn5W34UXFyUXaDanT9S1TB71UUUUU7qnTZGkaVYY2UrUUUUjbIjqfuFe4nvWSU5nxnvy2 9KBjDU0xBIdaVrnRJUUUvGb7Iv0xC_Kw4lb4IE77IF4wAFF20E14v26r1j6r4UM7CY07I2 0VC2zVCF04k26cxKx2IYs7xG6rWj6s0DM7CIcVAFz4kK6r1j6r18M28lY4IEw2IIxxk0rw A2F7IY1VAKz4vEj48ve4kI8wA2z4x0Y4vE2Ix0cI8IcVAFwI0_Jr0_JF4l84ACjcxK6xII jxv20xvEc7CjxVAFwI0_Jr0_Gr1l84ACjcxK6I8E87Iv67AKxVWxJVW8Jr1l84ACjcxK6I 8E87Iv6xkF7I0E14v26r4UJVWxJr1lnx0Ee4C267I2x7xF54xIwI0E7I0Y6sxI4wAS0I0E 0xvYzxvE52x082IY62kv0487M2AExVA0xI801c8C04v7Mc02F40EFcxC0VAKzVAqx4xG6I 80ewAv7VC0I7IYx2IY67AKxVWUXVWUAwAv7VC2z280aVAFwI0_Jr0_Gr1lOx8S6xCaFVCj c4AY6r1j6r4UM4x0Y48IcVAKI48JMxAIw28IcxkI7VAKI48JMxC20s026xCaFVCjc4AY6r 1j6r4UMI8I3I0E5I8CrVAFwI0_Jr0_Jr4lx2IqxVCjr7xvwVAFwI0_JrI_JrWlx4CE17CE b7AF67AKxVWUXVWUAwCIc40Y0x0EwIxGrwCI42IY6xIIjxv20xvE14v26r1j6r1xMIIF0x vE2Ix0cI8IcVCY1x0267AKxVWUJVW8JwCI42IY6xAIw20EY4v20xvaj40_Jr0_JF4lIxAI cVC2z280aVAFwI0_Jr0_Gr1lIxAIcVC2z280aVCY1x0267AKxVWUJVW8JbIYCTnIWIevJa 73UjIFyTuYvjxUh_OzDUUUU X-Originating-IP: [107.174.64.25] X-CM-SenderInfo: x2kh0wxmxqyx3h6l2u1dvotugofq/ Received-SPF: pass client-ip=159.226.251.21; envelope-from=zhengjunjie@iscas.ac.cn; helo=cstnet.cn X-Spam_score_int: -41 X-Spam_score: -4.2 X-Spam_bar: ---- X-Spam_report: (-4.2 / 5.0 requ) BAYES_00=-1.9, RCVD_IN_DNSWL_MED=-2.3, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, RCVD_IN_VALIDITY_SAFE_BLOCKED=0.001, SPF_HELO_PASS=-0.001, SPF_PASS=-0.001 autolearn=ham autolearn_force=no X-Spam_action: no action X-Spam-Score: -1.4 (-) X-Debbugs-Envelope-To: submit Cc: 73621-done@debbugs.gnu.org, Ashish SHUKLA X-BeenThere: debbugs-submit@debbugs.gnu.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: debbugs-submit-bounces@debbugs.gnu.org Sender: "Debbugs-submit" X-Spam-Score: -2.4 (--) --=-=-= Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: quoted-printable Ashish SHUKLA via Guix-patches via writes: > This contains a fix for CVE-2024-8508. > > * gnu/packages/dns.scm (unbound): Update to 1.21.1. > > Change-Id: I2ed1806a0859c5dbd729d18a074220ab13b53223 > --- > gnu/packages/dns.scm | 5 +++-- > 1 file changed, 3 insertions(+), 2 deletions(-) > > diff --git a/gnu/packages/dns.scm b/gnu/packages/dns.scm > index b2eda558df..1e9d1bc904 100644 > --- a/gnu/packages/dns.scm > +++ b/gnu/packages/dns.scm > @@ -22,6 +22,7 @@ > ;;; Copyright =C2=A9 2023 Bruno Victal > ;;; Copyright =C2=A9 2023 Hilton Chain > ;;; Copyright =C2=A9 2024 John Kehayias > +;;; Copyright =C2=A9 2024 Ashish SHUKLA > ;;; > ;;; This file is part of GNU Guix. > ;;; > @@ -635,14 +636,14 @@ (define-public rbldnsd > (define-public unbound > (package > (name "unbound") > - (version "1.21.0") > + (version "1.21.1") > (source > (origin > (method url-fetch) > (uri (string-append "https://www.unbound.net/downloads/unbound-" > version ".tar.gz")) > (sha256 > - (base32 "08a5l5z0c99433pqg2i7x5d9m6as7c2z3sv4zakdy6zqn3bagp77"))= )) > + (base32 "0ipam47nnh86v1wbjvk337wch6pcplbk353yr39kcav24cyd4dih"))= )) > (build-system gnu-build-system) > (outputs '("out" "python")) > (native-inputs > > base-commit: ebb715aabfc4e59ed14b964ac7fdd2a9f9f44526 push, close. --=-=-= Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEfr6klGDOXiwIdX/bO1qpk+Gi3/AFAmcBYWUACgkQO1qpk+Gi 3/AlaA//XLZp6w3BBOo5TDmF23tR9cabqDxQlEthR53Q7A9QuLGzvCqV7mxCf8t4 iXdt1w6JbqsQSCSLgWmnZql4LKuqc+B3HRxg9thm6pW6bSdEPLHcPwA0mZKVLb/C IYHOPq7D6JIeDS6KTDuXAzWqcBpY1Cbb9OvEIHmUnnB7+943aaqYImhXoSQsPD8c YLSA5Bu3KQCXBN3Z0Ht9hsNqVmvlTnOGTsr6cR06MaP97iZtMjvOAOkctOnHoOAR 3zEx/wnLuZlvDGrPZePJavkbgmFl9sejw/l3oafNV9xlKWun/r07QAHkpjnmwzxu HiMnhxM+7aJs4bmBgJOoK+++IYFb5uQTPkDIKVJdvN2r1WmczvU9AQt2Dph3qFO3 D4VGU7qhHa+SMU5xBhGAWyZJknAmeXGUzntS8k65x1UzFi3pak0AawJs6B2D4DA4 BsRF8+DyGA3zTt79auMyoZpy5ZsHxWEUD32mhP9xf5umX/DJsTE7pbLduwN33vpp Vn1WrwMc5esW5O8IrkHbSd9xe7KySWyFdMqvJJFJ5a8wkscZeC06IzprevqKUVVs JYbbANbx5GjuhlQVT1UaemMxz0cbc4K5b7+/otDznO+f0Lyx5ATvLFOVTkNb+YOS s/ua1mCnYvKV0KsKAazb2xyLxt5H6ymLBtYeLQFSY77nmUdixX0= =J5mV -----END PGP SIGNATURE----- --=-=-=-- From unknown Fri Jun 20 18:20:08 2025 Received: (at fakecontrol) by fakecontrolmessage; To: internal_control@debbugs.gnu.org From: Debbugs Internal Request Subject: Internal Control Message-Id: bug archived. Date: Sun, 03 Nov 2024 12:24:07 +0000 User-Agent: Fakemail v42.6.9 # This is a fake control message. # # The action: # bug archived. thanks # This fakemail brought to you by your local debbugs # administrator