From 71e24de7406c6ac947a8504a82ca64a9f3fc971a Mon Sep 17 00:00:00 2001 From: eaglegai Date: Tue, 27 Feb 2024 03:19:13 +0000 Subject: [PATCH] fix CVE-2024-1488 --- unbound.conf | 2 +- unbound.spec | 8 +++++++- 2 files changed, 8 insertions(+), 2 deletions(-) diff --git a/unbound.conf b/unbound.conf index 748a661..42e3573 100644 --- a/unbound.conf +++ b/unbound.conf @@ -805,7 +805,7 @@ remote-control: # Enable remote control with unbound-control(8) here. # set up the keys and certificates with unbound-control-setup. # Note: required for unbound-munin package - control-enable: yes + control-enable: no # Set to no and use an absolute path as control-interface to use # a unix local named pipe for unbound-control. diff --git a/unbound.spec b/unbound.spec index 19e47a8..d1a69d3 100644 --- a/unbound.spec +++ b/unbound.spec @@ -2,7 +2,7 @@ Name: unbound Version: 1.11.0 -Release: 10 +Release: 11 Summary: Unbound is a validating, recursive, caching DNS resolver License: BSD Url: https://nlnetlabs.nl/projects/unbound/about/ @@ -232,6 +232,12 @@ popd %{_mandir}/man* %changelog +* Tue Feb 27 2024 gaihuiying - 1.11.0-11 +- Type:cves +- CVE:CVE-2024-1488 +- SUG:NA +- DESC:fix CVE-2024-1488 + * Fri Feb 23 2024 gaihuiying - 1.11.0-10 - Type:bugfix - CVE:NA -- Gitee