Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package unbound for openSUSE:Factory checked
in at 2026-09-29 17:47:13
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/unbound (Old)
and /work/SRC/openSUSE:Factory/.unbound.new.383539 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "unbound"
Tue Sep 29 17:47:13 2026 rev:86 rq:1381192 version:1.26.1
Changes:
--------
--- /work/SRC/openSUSE:Factory/unbound/libunbound-devel-mini.changes
2026-08-05 17:46:46.774423975 +0200
+++
/work/SRC/openSUSE:Factory/.unbound.new.383539/libunbound-devel-mini.changes
2026-09-29 17:48:07.000048495 +0200
@@ -1,0 +2,31 @@
+Mon Sep 28 14:11:51 UTC 2026 - Jorik Cronenberg <[email protected]>
+
+- Update to 1.26.1:
+ * Fix CVE-2026-81642, Heap buffer overflow and possible Remote Code
+ Execution when digesting DNSKEY.
+ [bsc#1280411]
+ * Fix CVE-2026-81634, Possible heap buffer overflow during DNSSEC
+ canonicalization.
+ [bsc#1280409]
+ * Fix CVE-2026-82717, CNAME synthesis could lead to heap
+ corruption.
+ [bsc#1280412]
+ * Fix CVE-2026-77955, Possible ZONEMD verification bypass window.
+ [bsc#1280404]
+ * Fix CVE-2026-78227, Use-after-free in DoQ stream output buffer
+ on reset re-transmission.
+ [bsc#1280405]
+ * Fix CVE-2026-80225, Possible degradation of service from
+ continuous queries on the same TCP/DoT connection.
+ [bsc#1280406]
+ * Fix CVE-2026-82720, Use-after-free in DoH stream cleanup code
+ path.
+ [bsc#1280413]
+ * Fix CVE-2026-85501, Retrap: Novel Vulnerabilities to launch
+ Algorithmic Complexity Attacks on DNSSEC.
+ [bsc#1280414]
+ * Fix CVE-2026-77860, 'serve-expired' can bypass Unbound
+ 'wait-limit'.
+ [bsc#1280403]
+
+-------------------------------------------------------------------
unbound.changes: same change
Old:
----
unbound-1.26.0.tar.gz
unbound-1.26.0.tar.gz.asc
New:
----
unbound-1.26.1.tar.gz
unbound-1.26.1.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libunbound-devel-mini.spec ++++++
--- /var/tmp/diff_new_pack.9x3FIH/_old 2026-09-29 17:48:09.406149151 +0200
+++ /var/tmp/diff_new_pack.9x3FIH/_new 2026-09-29 17:48:09.407149193 +0200
@@ -22,7 +22,7 @@
%bcond_without hardened_build
#
Name: libunbound-devel-mini
-Version: 1.26.0
+Version: 1.26.1
#!BcntSyncTag: unbound
Release: 0
Summary: Just a devel package for build loops
++++++ unbound.spec ++++++
--- /var/tmp/diff_new_pack.9x3FIH/_old 2026-09-29 17:48:09.493152791 +0200
+++ /var/tmp/diff_new_pack.9x3FIH/_new 2026-09-29 17:48:09.498153000 +0200
@@ -43,7 +43,7 @@
%define piddir /run
Name: unbound
-Version: 1.26.0
+Version: 1.26.1
Release: 0
BuildRequires: flex
BuildRequires: ldns-devel >= %{ldns_version}
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.9x3FIH/_old 2026-09-29 17:48:09.554155343 +0200
+++ /var/tmp/diff_new_pack.9x3FIH/_new 2026-09-29 17:48:09.560155594 +0200
@@ -1,6 +1,6 @@
-mtime: 1786731462
-commit: 0627ec6275e6309d09008e1cbd8f9dbce1abb084bb7d240b706739164febec84
+mtime: 1790605611
+commit: f143e10b1cc23427a67d21d2191a39ad816e7b4210b5e8156afe740b3e197b44
url: https://src.opensuse.org/dns/unbound
-revision: 0627ec6275e6309d09008e1cbd8f9dbce1abb084bb7d240b706739164febec84
+revision: f143e10b1cc23427a67d21d2191a39ad816e7b4210b5e8156afe740b3e197b44
projectscmsync: https://src.opensuse.org/dns/_ObsPrj.git
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-09-28 16:26:51.000000000 +0200
@@ -0,0 +1 @@
+.osc
++++++ unbound-1.26.0.tar.gz -> unbound-1.26.1.tar.gz ++++++
/work/SRC/openSUSE:Factory/unbound/unbound-1.26.0.tar.gz
/work/SRC/openSUSE:Factory/.unbound.new.383539/unbound-1.26.1.tar.gz differ:
char 31, line 1
