unbound: Update to 1.6.8

For details see:
http://www.unbound.net/download.html

Fixes CVE-2017-15105: vulnerability in the processing of wildcard synthesized NSEC records,
=> https://unbound.net/downloads/CVE-2017-15105.txt

Best,
Matthias

Signed-off-by: Matthias Fischer <matthias.fischer@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>

diff --git a/config/rootfiles/common/unbound b/config/rootfiles/common/unbound
index 1c3994558ecce4f36b96e8117e9cd2b0ed7df9d2..642812342eeb186a1efef49742449e5618837394 100644 (file)
--- a/config/rootfiles/common/unbound
+++ b/config/rootfiles/common/unbound
@@ -11,7 +11,7 @@ etc/unbound/unbound.conf
 #usr/lib/libunbound.la
 #usr/lib/libunbound.so
 usr/lib/libunbound.so.2
-usr/lib/libunbound.so.2.5.6
+usr/lib/libunbound.so.2.5.7
 usr/sbin/unbound
 usr/sbin/unbound-anchor
 usr/sbin/unbound-checkconf

diff --git a/lfs/unbound b/lfs/unbound
index 0648fb77e910fb950be369ed7c04b0fd51a2fe20..64db0761f3d9803e8ab7d46c8e29ad02d8131cf5 100644 (file)
--- a/lfs/unbound
+++ b/lfs/unbound
@@ -1,7 +1,7 @@
 ###############################################################################
 #                                                                             #
 # IPFire.org - A linux based firewall                                         #
-# Copyright (C) 2007-2017  IPFire Team  <info@ipfire.org>                     #
+# Copyright (C) 2007-2018  IPFire Team  <info@ipfire.org>                     #
 #                                                                             #
 # This program is free software: you can redistribute it and/or modify        #
 # it under the terms of the GNU General Public License as published by        #
@@ -24,7 +24,7 @@
 
 include Config
 
-VER        = 1.6.7
+VER        = 1.6.8
 
 THISAPP    = unbound-$(VER)
 DL_FILE    = $(THISAPP).tar.gz
@@ -40,7 +40,7 @@ objects = $(DL_FILE)
 
 $(DL_FILE) = $(DL_FROM)/$(DL_FILE)
 
-$(DL_FILE)_MD5 = 67ed382add11134d689f5e88f8efc43e
+$(DL_FILE)_MD5 = c9d26cef224b10705229d5072142636c
 
 install : $(TARGET)