4373 Commits
Author SHA1 Message Date
Ankur Tyagi 47d7dbdd10 unbound: patch CVE-2026-56444
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56444

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:05 +05:30
Ankur Tyagi b03acb631b unbound: patch CVE-2026-56416
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-56416

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:04 +05:30
Ankur Tyagi 5401a83771 unbound: patch CVE-2026-55991
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55991

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:04 +05:30
Ankur Tyagi b18b97d782 unbound: patch CVE-2026-55990
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55990

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:03 +05:30
Ankur Tyagi 5d932adbde unbound: patch CVE-2026-55973
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55973

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:03 +05:30
Ankur Tyagi 44c0618c07 unbound: patch CVE-2026-55717
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55717

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:02 +05:30
Ankur Tyagi 7f1398a6c4 unbound: patch CVE-2026-55708
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55708

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:02 +05:30
Ankur Tyagi 1cede7d75e unbound: patch CVE-2026-54478
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54478

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi e88cf8a339 unbound: patch CVE-2026-52863
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-52863

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi 9cf83c6ad4 unbound: patch CVE-2026-50252
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50252

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:01 +05:30
Ankur Tyagi ad6d182534 unbound: patch CVE-2026-50251
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50251

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:00 +05:30
Ankur Tyagi 252dc099d1 unbound: patch CVE-2026-50248
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50248

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:14:00 +05:30
Ankur Tyagi a20f5dc9d3 unbound: patch CVE-2026-50243
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50243

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:59 +05:30
Ankur Tyagi 394ec2adfb unbound: patch CVE-2026-50046
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50046

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:59 +05:30
Ankur Tyagi 5333e61d4f unbound: patch CVE-2026-50045
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-50045

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:58 +05:30
Ankur Tyagi 04efaf8876 unbound: patch CVE-2026-44687
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44687

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:58 +05:30
Ankur Tyagi 83e98ed1a1 unbound: patch CVE-2026-44621
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44621

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:57 +05:30
Ankur Tyagi c805d76db2 unbound: patch CVE-2026-42955
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42955

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:57 +05:30
Ankur Tyagi 8792c7f818 unbound: patch CVE-2026-32665
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32665

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:56 +05:30
Ankur Tyagi e7aac6e2ec unbound: patch CVE-2026-46582
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-46582

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:56 +05:30
Ankur Tyagi 9af75c4481 unbound: patch CVE-2026-44608
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44608

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi e9a946d263 unbound: patch CVE-2026-44390
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-44390

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi 1c4d899d2d unbound: patch CVE-2026-42960
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42960

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:55 +05:30
Ankur Tyagi 5d793b6ca9 unbound: patch CVE-2026-42923
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42923

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:54 +05:30
Ankur Tyagi 11bc965378 unbound: patch CVE-2026-42534
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42534

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:54 +05:30
Ankur Tyagi 565166d088 unbound: patch CVE-2026-41292
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-41292

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:53 +05:30
Ankur Tyagi 7e47245343 unbound: patch CVE-2026-40622
Also backport TTL_IS_EXPIRED macro introduced by commit:
https://github.com/NLnetLabs/unbound/commit/73e408f1d0792267429e9f5f89537cda61297952

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-40622

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:53 +05:30
Ankur Tyagi e5bdfcd5ed unbound: patch CVE-2026-32792
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-32792

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:52 +05:30
Ankur Tyagi 115d62e043 unbound: patch CVE-2026-42959
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42959

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:52 +05:30
Ankur Tyagi 47db00bd59 unbound: patch CVE-2026-42944
Backport commit[1] needed to cherry-pick the fix.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-42944

[1]https://github.com/NLnetLabs/unbound/commit/44659cb3bf4601d2daa19a0d51ac5af54bc698bc

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:51 +05:30
Ankur Tyagi 4dce0f9343 unbound: patch CVE-2026-33278
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-33278

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:51 +05:30
Ankur Tyagi 7ce36bf1cc wolfssl: patch CVE-2026-7531
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-7531

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:42 +05:30
Ankur Tyagi e99f95d5b5 wolfssl: patch CVE-2026-6731
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6731

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:42 +05:30
Ankur Tyagi 983b006bac wolfssl: patch CVE-2026-6450
Also backport follow-up PR[1] to the initial PR mentioned in the NVD.

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6450

[1]https://github.com/wolfSSL/wolfssl/pull/10274

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:41 +05:30
Ankur Tyagi f2b753bc78 wolfssl: patch CVE-2026-6412
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6412

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:41 +05:30
Ankur Tyagi c78dd4dd4d wolfssl: patch CVE-2026-6325
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6325

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:40 +05:30
Ankur Tyagi 91aa2a8e57 wolfssl: patch CVE-2026-6291
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6291

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:40 +05:30
Ankur Tyagi 140b51ee66 wolfssl: patch CVE-2026-6094
Details
https://nvd.nist.gov/vuln/detail/cve-2026-6094

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:39 +05:30
Ankur Tyagi 4b124297a2 wolfssl: patch CVE-2026-6092
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6092

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:39 +05:30
Ankur Tyagi c897678f87 wolfssl: patch CVE-2026-6091
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-6091

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:38 +05:30
Ankur Tyagi 7b5f42ff26 wolfssl: patch CVE-2026-55958
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55958

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:38 +05:30
Ankur Tyagi 64f5842834 wolfssl: ignore CVE-2026-12340
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-12340

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:37 +05:30
Ankur Tyagi cfa27d8569 wolfssl: patch CVE-2026-10512
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-10512

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:37 +05:30
Ankur Tyagi 6e7213f4d5 wolfssl: patch CVE-2026-10098
CVE-2026-10098-1.patch is needed to cherry-pick the commit mentioned in the
PR[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-10098

[1]https://github.com/wolfSSL/wolfssl/pull/10554/commits

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:37 +05:30
Ankur Tyagi c12fcc9b48 wolfssl: mark CVEs patched
CVE-2023-6937[1] and CVE-2024-5814[2] are patched in current version.

Details:
https://nvd.nist.gov/vuln/detail/cve-2023-6937
https://nvd.nist.gov/vuln/detail/cve-2024-5814

[1]https://github.com/wolfSSL/wolfssl/blob/v5.6.6-stable/ChangeLog.md#vulnerabilities
[2]https://github.com/wolfSSL/wolfssl/blob/v5.7.2-stable/ChangeLog.md#vulnerabilities

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:36 +05:30
Ankur Tyagi c799467d9c open62541: patch CVE-2026-11946
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-11946

[1]https://security-tracker.debian.org/tracker/CVE-2026-11946

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:35 +05:30
Ankur Tyagi 233e6a56e5 tinyproxy: patch CVE-2026-55202
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-55202

[1]https://security-tracker.debian.org/tracker/CVE-2026-55202

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:34 +05:30
Ankur Tyagi 33649b0657 tinyproxy: patch CVE-2026-54387
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-54387

[1]https://security-tracker.debian.org/tracker/CVE-2026-54387

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:33 +05:30
Ankur Tyagi 985acd9e7c tinyproxy: patch CVE-2026-31842
Backport commit identified by Debian[1]

Details:
https://nvd.nist.gov/vuln/detail/cve-2026-31842

[1]https://security-tracker.debian.org/tracker/CVE-2026-31842

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:33 +05:30
Ankur Tyagi 683afd55b2 miniupnpd: patch CVE-2026-5720
Details:
https://nvd.nist.gov/vuln/detail/cve-2026-5720

Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>
2026-09-15 10:13:30 +05:30