mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-23 23:30:19 +00:00
Code Issues Projects Releases Wiki Activity

unbound: patch CVE-2026-42959

Browse Source 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42959

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-15 10:13:52 +05:30
committed by Anuj Mittal
parent 47db00bd59
commit 115d62e043
2 changed files with 37 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-networking/recipes-support/unbound/unbound/CVE-2026-42959.patch
+36
View File
@@ -0,0 +1,36 @@
From 42e04de6baba41208c80f8003f2dca58ebf66468 Mon Sep 17 00:00:00 2001
From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
Date: Wed, 20 May 2026 10:14:32 +0200
Subject: [PATCH] - Fix CVE-2026-42959, Crash during DNSSEC validation of
malicious content. Thanks to Qifan Zhang, Palo Alto Networks, for the
report.
(cherry picked from commit 94d5babaee22a016e376bdcfee2b9bb40360367c)
CVE: CVE-2026-42959
Upstream-Status: Backport [https://github.com/NLnetLabs/unbound/commit/94d5babaee22a016e376bdcfee2b9bb40360367c]
Dropped changes to the Changelog file.
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
validator/val_utils.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/validator/val_utils.c b/validator/val_utils.c
index 549264d76..4495695ac 100644
--- a/validator/val_utils.c
+++ b/validator/val_utils.c
@@ -1066,10 +1066,10 @@ val_fill_reply(struct reply_info* chase, struct reply_info* orig,
if(query_dname_compare(name,
orig->rrsets[i]->rk.dname) == 0)
chase->rrsets[chase->an_numrrsets
- +orig->ns_numrrsets+chase->ar_numrrsets++]
+ +chase->ns_numrrsets+chase->ar_numrrsets++]
= orig->rrsets[i];
} else if(rrset_has_signer(orig->rrsets[i], name, len)) {
- chase->rrsets[chase->an_numrrsets+orig->ns_numrrsets+
+ chase->rrsets[chase->an_numrrsets+chase->ns_numrrsets+
chase->ar_numrrsets++] = orig->rrsets[i];
}
}
meta-networking/recipes-support/unbound/unbound_1.24.2.bb
+1
View File
@@ -14,6 +14,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t
file://CVE-2026-33278.patch \
file://CVE-2026-42944-1.patch \
file://CVE-2026-42944-2.patch \
file://CVE-2026-42959.patch \
"
SRCREV = "f6269baa605d31859f28770e01a24e3677e5f82c"