From 115d62e0435f25ababd6c6c5c0227e7ec53b0661 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Fri, 11 Sep 2026 11:09:03 +1200 Subject: [PATCH] unbound: patch CVE-2026-42959 Details: https://nvd.nist.gov/vuln/detail/cve-2026-42959 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- .../unbound/unbound/CVE-2026-42959.patch | 36 +++++++++++++++++++ .../recipes-support/unbound/unbound_1.24.2.bb | 1 + 2 files changed, 37 insertions(+) create mode 100644 meta-networking/recipes-support/unbound/unbound/CVE-2026-42959.patch diff --git a/meta-networking/recipes-support/unbound/unbound/CVE-2026-42959.patch b/meta-networking/recipes-support/unbound/unbound/CVE-2026-42959.patch new file mode 100644 index 0000000000..b8df4f66c4 --- /dev/null +++ b/meta-networking/recipes-support/unbound/unbound/CVE-2026-42959.patch @@ -0,0 +1,36 @@ +From 42e04de6baba41208c80f8003f2dca58ebf66468 Mon Sep 17 00:00:00 2001 +From: "W.C.A. Wijngaards" +Date: Wed, 20 May 2026 10:14:32 +0200 +Subject: [PATCH] - Fix CVE-2026-42959, Crash during DNSSEC validation of + malicious content. Thanks to Qifan Zhang, Palo Alto Networks, for the + report. + +(cherry picked from commit 94d5babaee22a016e376bdcfee2b9bb40360367c) + +CVE: CVE-2026-42959 +Upstream-Status: Backport [https://github.com/NLnetLabs/unbound/commit/94d5babaee22a016e376bdcfee2b9bb40360367c] + +Dropped changes to the Changelog file. + +Signed-off-by: Ankur Tyagi +--- + validator/val_utils.c | 4 ++-- + 1 file changed, 2 insertions(+), 2 deletions(-) + +diff --git a/validator/val_utils.c b/validator/val_utils.c +index 549264d76..4495695ac 100644 +--- a/validator/val_utils.c ++++ b/validator/val_utils.c +@@ -1066,10 +1066,10 @@ val_fill_reply(struct reply_info* chase, struct reply_info* orig, + if(query_dname_compare(name, + orig->rrsets[i]->rk.dname) == 0) + chase->rrsets[chase->an_numrrsets +- +orig->ns_numrrsets+chase->ar_numrrsets++] ++ +chase->ns_numrrsets+chase->ar_numrrsets++] + = orig->rrsets[i]; + } else if(rrset_has_signer(orig->rrsets[i], name, len)) { +- chase->rrsets[chase->an_numrrsets+orig->ns_numrrsets+ ++ chase->rrsets[chase->an_numrrsets+chase->ns_numrrsets+ + chase->ar_numrrsets++] = orig->rrsets[i]; + } + } diff --git a/meta-networking/recipes-support/unbound/unbound_1.24.2.bb b/meta-networking/recipes-support/unbound/unbound_1.24.2.bb index b8853c9d63..3adc98621e 100644 --- a/meta-networking/recipes-support/unbound/unbound_1.24.2.bb +++ b/meta-networking/recipes-support/unbound/unbound_1.24.2.bb @@ -14,6 +14,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t file://CVE-2026-33278.patch \ file://CVE-2026-42944-1.patch \ file://CVE-2026-42944-2.patch \ + file://CVE-2026-42959.patch \ " SRCREV = "f6269baa605d31859f28770e01a24e3677e5f82c"