fix CVE-2023-50387 CVE-2023-50868

unbound.spec

@@ -2,7 +2,7 @@
 
 Name:          unbound
 Version:       1.17.1
-Release:       1
+Release:       2
 Summary:       Unbound is a validating, recursive, caching DNS resolver
 License:       BSD-3-Clause
 Url:           https://nlnetlabs.nl/projects/unbound/about/
@@ -22,6 +22,7 @@ Source12:      unbound-anchor.timer
 Source13:      unbound-anchor.service
 
 Patch1:        unbound-remove-buildin-key.patch
+Patch2:        backport-CVE-2023-50387_CVE-2023-50868.patch
 
 BuildRequires: make flex swig pkgconfig systemd
 BuildRequires: libevent-devel expat-devel openssl-devel python3-devel
@@ -234,6 +235,12 @@ popd
 %{_mandir}/man*
 
 %changelog
+* Fri Feb 23 2024 gaihuiying <eaglegai@163.com> - 1.17.1-2
+- Type:bugfix
+- CVE:NA
+- SUG:NA
+- DESC:fix CVE-2023-50387 CVE-2023-50868
+
 * Tue Mar 07 2023 gaihuiying <eaglegai@163.com> - 1.17.1-1
 - Type:requirement
 - CVE:NA