mirrors/meta-openembedded
1
0
Fork 0
mirror of https://github.com/openembedded/meta-openembedded.git synced 2026-09-23 11:21:11 +00:00
Code Issues Projects Releases Wiki Activity

unbound: patch CVE-2026-50248

Browse Source 
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50248

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
This commit is contained in:
Ankur Tyagi
2026-09-15 10:14:00 +05:30
committed by Anuj Mittal
parent a20f5dc9d3
commit 252dc099d1
2 changed files with 78 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
meta-networking/recipes-support/unbound/unbound/CVE-2026-50248.patch
+77
View File
@@ -0,0 +1,77 @@
From ad27c1762cd00df8b808925ab240fc4c0766c228 Mon Sep 17 00:00:00 2001
From: "W.C.A. Wijngaards" <wouter@nlnetlabs.nl>
Date: Wed, 22 Jul 2026 10:14:35 +0200
Subject: [PATCH] - Fix CVE-2026-50248, BOGUS configured primary hostname
accepted for XFR in auth/rpz zones. Thanks to Qifan Zhang, Palo Alto
Networks, for the report.
(cherry picked from commit 3530c81e29e64ed19c612ae3dea21c8800d882e1)
CVE: CVE-2026-50248
Upstream-Status: Backport [https://github.com/NLnetLabs/unbound/commit/3530c81e29e64ed19c612ae3dea21c8800d882e1]
Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
---
services/authzone.c | 28 ++++++++++++++++++++++------
1 file changed, 22 insertions(+), 6 deletions(-)
diff --git a/services/authzone.c b/services/authzone.c
index 60ccc8698..357c1c590 100644
--- a/services/authzone.c
+++ b/services/authzone.c
@@ -5693,8 +5693,7 @@ xfr_master_add_addrs(struct auth_master* m, struct ub_packed_rrset_key* rrset,
/** callback for task_transfer lookup of host name, of A or AAAA */
void auth_xfer_transfer_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
- enum sec_status ATTR_UNUSED(sec), char* ATTR_UNUSED(why_bogus),
- int ATTR_UNUSED(was_ratelimited))
+ enum sec_status sec, char* why_bogus, int ATTR_UNUSED(was_ratelimited))
{
struct auth_xfer* xfr = (struct auth_xfer*)arg;
struct module_env* env;
@@ -5707,7 +5706,16 @@ void auth_xfer_transfer_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
}
/* process result */
- if(rcode == LDNS_RCODE_NOERROR) {
+ if(sec == sec_status_bogus || sec == sec_status_secure_sentinel_fail) {
+ if(verbosity >= VERB_OPS) {
+ char zname[LDNS_MAX_DOMAINLEN];
+ dname_str(xfr->name, zname);
+ verbose(VERB_OPS, "auth zone %s: primary %s address lookup is DNSSEC bogus: %s",
+ zname, xfr->task_transfer->lookup_target->host,
+ (why_bogus?why_bogus:""));
+ }
+ /* fall through to next-lookup / next-master */
+ } else if(rcode == LDNS_RCODE_NOERROR) {
uint16_t wanted_qtype = LDNS_RR_TYPE_A;
struct regional* temp = env->scratch;
struct query_info rq;
@@ -6756,8 +6764,7 @@ xfr_probe_send_or_end(struct auth_xfer* xfr, struct module_env* env)
/** callback for task_probe lookup of host name, of A or AAAA */
void auth_xfer_probe_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
- enum sec_status ATTR_UNUSED(sec), char* ATTR_UNUSED(why_bogus),
- int ATTR_UNUSED(was_ratelimited))
+ enum sec_status sec, char* why_bogus, int ATTR_UNUSED(was_ratelimited))
{
struct auth_xfer* xfr = (struct auth_xfer*)arg;
struct module_env* env;
@@ -6770,7 +6777,16 @@ void auth_xfer_probe_lookup_callback(void* arg, int rcode, sldns_buffer* buf,
}
/* process result */
- if(rcode == LDNS_RCODE_NOERROR) {
+ if(sec == sec_status_bogus || sec == sec_status_secure_sentinel_fail) {
+ if(verbosity >= VERB_OPS) {
+ char zname[LDNS_MAX_DOMAINLEN];
+ dname_str(xfr->name, zname);
+ verbose(VERB_OPS, "auth zone %s: primary %s address probe lookup is DNSSEC bogus: %s",
+ zname, xfr->task_transfer->lookup_target->host,
+ (why_bogus?why_bogus:""));
+ }
+ /* fall through to next-lookup / next-master */
+ } else if(rcode == LDNS_RCODE_NOERROR) {
uint16_t wanted_qtype = LDNS_RR_TYPE_A;
struct regional* temp = env->scratch;
struct query_info rq;
meta-networking/recipes-support/unbound/unbound_1.24.2.bb
+1
View File
@@ -31,6 +31,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t
file://CVE-2026-50045.patch \
file://CVE-2026-50046.patch \
file://CVE-2026-50243.patch \
file://CVE-2026-50248.patch \
"
SRCREV = "f6269baa605d31859f28770e01a24e3677e5f82c"