Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package unbound for openSUSE:Factory checked
in at 2026-10-23 20:22:01
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/unbound (Old)
and /work/SRC/openSUSE:Factory/.unbound.new.2252680 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "unbound"
Fri Oct 23 20:22:01 2026 rev:87 rq:1387072 version:1.26.2
Changes:
--------
--- /work/SRC/openSUSE:Factory/unbound/libunbound-devel-mini.changes
2026-09-29 17:48:07.000048495 +0200
+++
/work/SRC/openSUSE:Factory/.unbound.new.2252680/libunbound-devel-mini.changes
2026-10-23 20:22:28.483946237 +0200
@@ -1,0 +2,22 @@
+Thu Oct 22 10:36:10 UTC 2026 - Jorik Cronenberg <[email protected]>
+
+- Update to 1.26.2:
+ * Fix CVE-2026-97206, DoQ path-migration can lead to use-after-free
+ on multi-threaded deployments.
+ [bsc#1286139]
+ * Fix CVE-2026-50106, Possible insecure NXDOMAIN for non-existing
+ records under a configured island trust anchor underneath an
+ insecure parent.
+ [bsc#1286140]
+ * Fix CVE-2026-96405, Aggregate DNS name chained pointer
+ decompression work leads to degradation of service.
+ [bsc#1286141]
+ * Fix CVE-2026-109125, Possible cache poisoning vulnerability via
+ a cache side-channel exposed by 'unwanted-reply-threshold'.
+ [bsc#1286142]
+ * Fix CVE-2026-35501, Bypass of a configured island trust anchor
+ underneath an insecure parent from an attacker-controlled NSEC
+ record.
+ [bsc#1286143]
+
+-------------------------------------------------------------------
unbound.changes: same change
Old:
----
unbound-1.26.1.tar.gz
unbound-1.26.1.tar.gz.asc
New:
----
unbound-1.26.2.tar.gz
unbound-1.26.2.tar.gz.asc
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ libunbound-devel-mini.spec ++++++
--- /var/tmp/diff_new_pack.D0Q11o/_old 2026-10-23 20:22:30.186016916 +0200
+++ /var/tmp/diff_new_pack.D0Q11o/_new 2026-10-23 20:22:30.188016999 +0200
@@ -22,7 +22,7 @@
%bcond_without hardened_build
#
Name: libunbound-devel-mini
-Version: 1.26.1
+Version: 1.26.2
#!BcntSyncTag: unbound
Release: 0
Summary: Just a devel package for build loops
++++++ unbound.spec ++++++
--- /var/tmp/diff_new_pack.D0Q11o/_old 2026-10-23 20:22:30.235018951 +0200
+++ /var/tmp/diff_new_pack.D0Q11o/_new 2026-10-23 20:22:30.237019034 +0200
@@ -43,7 +43,7 @@
%define piddir /run
Name: unbound
-Version: 1.26.1
+Version: 1.26.2
Release: 0
BuildRequires: flex
BuildRequires: ldns-devel >= %{ldns_version}
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.D0Q11o/_old 2026-10-23 20:22:30.280020820 +0200
+++ /var/tmp/diff_new_pack.D0Q11o/_new 2026-10-23 20:22:30.286021069 +0200
@@ -1,6 +1,6 @@
-mtime: 1790605611
-commit: f143e10b1cc23427a67d21d2191a39ad816e7b4210b5e8156afe740b3e197b44
+mtime: 1792665659
+commit: 464ae3d8f9b6de15aea29f5b1f7bb9b3afca33ee4be89aa46d70c15de795612a
url: https://src.opensuse.org/dns/unbound
-revision: f143e10b1cc23427a67d21d2191a39ad816e7b4210b5e8156afe740b3e197b44
+revision: 464ae3d8f9b6de15aea29f5b1f7bb9b3afca33ee4be89aa46d70c15de795612a
projectscmsync: https://src.opensuse.org/dns/_ObsPrj.git
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-10-22 12:40:59.000000000 +0200
@@ -0,0 +1 @@
+.osc
++++++ unbound-1.26.1.tar.gz -> unbound-1.26.2.tar.gz ++++++
/work/SRC/openSUSE:Factory/unbound/unbound-1.26.1.tar.gz
/work/SRC/openSUSE:Factory/.unbound.new.2252680/unbound-1.26.2.tar.gz differ:
char 90, line 1
