From e9a946d263d73a2ee174da2718af9d157dd21c31 Mon Sep 17 00:00:00 2001 From: Ankur Tyagi Date: Fri, 11 Sep 2026 11:09:10 +1200 Subject: [PATCH] unbound: patch CVE-2026-44390 Details: https://nvd.nist.gov/vuln/detail/cve-2026-44390 Signed-off-by: Ankur Tyagi Signed-off-by: Anuj Mittal --- .../unbound/unbound/CVE-2026-44390.patch | 37 +++++++++++++++++++ .../recipes-support/unbound/unbound_1.24.2.bb | 1 + 2 files changed, 38 insertions(+) create mode 100644 meta-networking/recipes-support/unbound/unbound/CVE-2026-44390.patch diff --git a/meta-networking/recipes-support/unbound/unbound/CVE-2026-44390.patch b/meta-networking/recipes-support/unbound/unbound/CVE-2026-44390.patch new file mode 100644 index 0000000000..6c13e90bf0 --- /dev/null +++ b/meta-networking/recipes-support/unbound/unbound/CVE-2026-44390.patch @@ -0,0 +1,37 @@ +From 166c308b1beba4ecf586d51d63513478d75019a1 Mon Sep 17 00:00:00 2001 +From: "W.C.A. Wijngaards" +Date: Wed, 20 May 2026 10:21:26 +0200 +Subject: [PATCH] - Fix CVE-2026-44390, Unbounded name compression in certain + cases causes degradation of service. Thanks to Qifan Zhang, Palo Alto + Networks, for the report. + +(cherry picked from commit dae7a3797424607906b132c008fc12dba867b5f3) + +CVE: CVE-2026-44390 +Upstream-Status: Backport [https://github.com/NLnetLabs/unbound/commit/dae7a3797424607906b132c008fc12dba867b5f3] + +Signed-off-by: Ankur Tyagi +--- + util/data/msgencode.c | 2 +- + 1 file changed, 1 insertion(+), 1 deletion(-) + +diff --git a/util/data/msgencode.c b/util/data/msgencode.c +index 7bc55a54e..f84c491b1 100644 +--- a/util/data/msgencode.c ++++ b/util/data/msgencode.c +@@ -352,7 +352,6 @@ compress_any_dname(uint8_t* dname, sldns_buffer* pkt, int labs, + (p = compress_tree_lookup(tree, dname, labs, &insertpt))) { + if(!write_compressed_dname(pkt, dname, labs, p)) + return RETVAL_TRUNC; +- (*compress_count)++; + } else { + if(!dname_buffer_write(pkt, dname)) + return RETVAL_TRUNC; +@@ -360,6 +359,7 @@ compress_any_dname(uint8_t* dname, sldns_buffer* pkt, int labs, + if(*compress_count < MAX_COMPRESSION_PER_MESSAGE && + !compress_tree_store(dname, labs, pos, region, p, insertpt)) + return RETVAL_OUTMEM; ++ (*compress_count)++; + return RETVAL_OK; + } + diff --git a/meta-networking/recipes-support/unbound/unbound_1.24.2.bb b/meta-networking/recipes-support/unbound/unbound_1.24.2.bb index a6f9b14cab..9de6a3c88c 100644 --- a/meta-networking/recipes-support/unbound/unbound_1.24.2.bb +++ b/meta-networking/recipes-support/unbound/unbound_1.24.2.bb @@ -21,6 +21,7 @@ SRC_URI = "git://github.com/NLnetLabs/unbound.git;protocol=https;branch=master;t file://CVE-2026-42534.patch \ file://CVE-2026-42923.patch \ file://CVE-2026-42960.patch \ + file://CVE-2026-44390.patch \ " SRCREV = "f6269baa605d31859f28770e01a24e3677e5f82c"