extra/unbound to 1.21.0-2

extra/unbound/.SRCINFO

@@ -1,7 +1,7 @@
 pkgbase = unbound
 	pkgdesc = Validating, recursive, and caching DNS resolver
 	pkgver = 1.21.0
-	pkgrel = 1
+	pkgrel = 2
 	url = https://unbound.net/
 	arch = x86_64
 	license = BSD-3-Clause

extra/unbound/PKGBUILD

@@ -10,7 +10,7 @@
 
 pkgname=unbound
 pkgver=1.21.0
-pkgrel=1
+pkgrel=2
 pkgdesc="Validating, recursive, and caching DNS resolver"
 arch=(x86_64)
 url="https://unbound.net/"
@@ -64,6 +64,8 @@ prepare() {
   # enable trusted-anchor-file and set it to an unbound specific location
   patch -p1 -d $pkgname -i ../$pkgname-1.14.0-trust_anchor_file.patch
   cd $pkgname
+  # CVE-2024-8508 (temporary fix)
+  git cherry-pick -n b7c61d7cc256d6a174e6179622c7fa968272c259
   autoreconf -fiv
 }