Jackson James fc30bb5eed unbound: Fix CVE-2025-11411 ...

Backport complete patch to fix CVE-2025-11411

The existing scarthgap patch is a partial backport with hardcoded logic,
causing incorrect behavior and ptest failures. Backport the full upstream
fix along with the follow-up patch to ensure correct functionality.

Add below patch to fix
0001-CVE-2025-11411-1.patch
0002-CVE-2025-11411-2.patch

Signed-off-by: Jackson James <jacksonj2@kpit.com>
Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com>

2026-04-13 12:40:21 +05:30

..

aoetools

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

arptables

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

bmon

…

bridge-utils

…

celt051

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

chrony

chrony: use inherit_defer for conditional inherit of useradd

2025-06-23 16:57:53 -04:00

cifs

cifs-utils: patch CVE-2025-2312

2026-01-12 07:51:56 +05:30

cim-schema

…

curlpp

curlpp: Remove references to buildpaths e.g. TMPDIR

2023-05-23 08:48:18 -07:00

dnsmasq

dnsmasq: Upgrade 2.89 -> 2.90

2024-02-26 08:13:22 -08:00

dovecot

dovecot: ignore CVE-2025-30189

2026-02-25 13:00:40 +05:30

drbd

drbd-utils: Fix a udev rule reproducibility

2024-03-05 11:02:04 -08:00

dropwatch

unionfs-fuse, dropwatch, postgresql, yasm, multipath-tools, python3-pybind11: add missing Upstream-Status

2024-03-17 13:10:09 -07:00

esmtp

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

ettercap

ettercap: patch CVE-2026-3603

2026-03-24 08:52:09 +05:30

fetchmail

fetchmail: patch CVE-2025-61962

2025-12-17 11:45:22 +05:30

fping

.patch: fix Upstream-Status formatting issues reported by patchreview tool from oe-core

2023-01-27 17:06:52 -08:00

fwknop

fwknop: Specify target locations of gpg and wget

2025-04-16 20:30:24 -04:00

geoip

geoip: fix do_fetch error

2025-09-23 16:30:14 +08:00

htpdate

htpdate: upgrade 1.3.6 -> 1.3.7

2023-02-16 19:33:29 -08:00

http-parser

http-parser: fix SRC_URI branch

2025-11-12 11:32:41 +05:30

ifenslave

ifenslave: upgrade 2.13 -> 2.14

2023-12-18 22:17:19 -08:00

ifmetric

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

iftop

…

ipcalc

ipcalc: upgrade 1.0.2 -> 1.0.3

2023-06-14 09:41:35 -07:00

ipvsadm

ipvsadm: Pass build environment cflags to compiler

2023-05-26 18:36:56 -07:00

libconfuse

libconfuse: patch CVE-2022-40320

2025-10-30 14:43:33 +08:00

libcpr

libcpr: add new recipe

2024-03-26 14:00:53 -07:00

libesmtp

gnome-tweaks, networkmanager-fortisslvpn, libesmtp, json-schema-validator, python3-pybluez, python3-pynetlinux, apache2: Fix Malformed Upstream-Status

2023-09-27 14:22:09 -07:00

libexosip2

libexosip2: package binaries in a separate package

2023-11-22 16:39:50 -08:00

libldb

libldb: upgrade 2.8.1 -> 2.8.2

2025-11-12 11:14:57 +05:30

libmaxminddb

…

libmemcached

libmemcached: ignore CVE-2023-27478

2025-12-30 07:08:13 +05:30

libosip2

libosip2: add recipe

2023-10-17 21:42:56 -07:00

libtalloc

Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path

2024-04-21 10:52:39 -07:00

libtdb

Use PYTHON_SITEPACKAGES_DIR instead of hard-coded site-packages directory path

2024-04-21 10:52:39 -07:00

libtevent

libtevent: upgrade 0.16.0 -> 0.16.1

2024-06-02 14:57:06 -04:00

linux-atm

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

lksctp-tools

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

lowpan-tools

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

macchanger

*.patch: add Upstream-Status to all patches

2023-06-21 09:15:20 -07:00

mctp

mctp: upgrade 1.0 -> 1.1

2023-04-17 09:53:31 -07:00

mdio-tools

mdio-tools: fix mdio-netlink kernel module reproducibility

2025-02-04 14:41:20 -08:00

memcached

memcached: patch CVE-2023-46853

2025-10-30 14:43:35 +08:00

mtr

mtr: patch CVE-2025-49809

2026-01-12 07:51:59 +05:30

nbd

…

nbdkit

nbdkit: patch CVE-2025-47712

2025-12-03 10:31:34 +05:30

ncp

meta-networking: fix Upstream-Status format

2023-02-24 08:45:44 -08:00

ndisc6

ndisc6: Fix reproducible build

2024-12-15 14:14:43 -05:00

netcat

recipes: Drop remaining PR values from recipes

2024-03-17 13:10:10 -07:00

netcf

netcf: Fix build with latest gnulib

2024-03-09 10:55:22 -08:00

netperf

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

netsniff-ng

netsniff-ng: fix SRC_URI branch

2025-11-12 11:32:41 +05:30

nis

ypbind-mt: Upgrade to 2.7.2

2022-08-30 00:14:58 -07:00

ntimed

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

ntopng

ndpi: ignore CVE-2025-25066

2025-10-30 14:43:36 +08:00

ntp

ntp: add missing runtime dependencies

2023-09-07 08:22:43 -07:00

ntpsec

ntpsec, net-snmp: drop ${PE}, ${PR} from /usr/src/debug paths

2023-11-20 09:30:39 -08:00

nuttcp

…

open-isns

open-isns: upgrade 0.101 -> 0.102

2022-09-13 09:55:02 -07:00

open-vm-tools

open-vm-tools: fix CVE-2025-41244

2025-10-30 14:43:30 +08:00

openipmi

openipmi: upgrade 2.0.34->2.0.36

2024-11-09 14:40:32 -05:00

openvpn

openvpn: ignore CVE-2025-13751

2026-01-26 10:04:48 +05:30

pgpool2

pgpool2: Fix build with postgresql 16+

2024-03-05 11:02:05 -08:00

phytool

recipes: drop ${SRCPV} usage

2024-02-09 09:52:12 -08:00

pimd

pimd: switch SRC_URI to https

2024-04-14 08:38:39 -07:00

rdma-core

rdma-core: upgrade 50.0 -> 51.0

2024-04-21 10:52:48 -07:00

ruli

ruli: Pass cflags to makefile

2023-05-28 16:34:59 -07:00

smcroute

smcroute: upgrade 2.5.5 -> 2.5.6

2022-12-05 09:16:24 -08:00

sngrep

sngrep: upgrade 1.8.1 -> 1.8.2

2025-12-30 07:08:05 +05:30

spice

spice: set CVE-2016-2150 status to fixed

2026-03-24 08:52:04 +05:30

ssmping

ssmping: Use debian mirror for SRC_URI

2025-09-23 16:30:15 +08:00

ssmtp

ssmtp: Fix build with musl >= 1.2.5

2024-03-25 12:50:39 -07:00

strongswan

strongswan: Fix CVE-2026-25075

2026-04-03 15:00:48 +05:30

stunnel

stunnel: upgrade 5.69 -> 5.72

2024-03-08 10:07:24 -08:00

tcpdump

tcpdump: fix CVE-2024-2397

2024-06-26 07:30:56 -04:00

tcpreplay

tcpreplay: fix CVE-2025-51006

2026-01-26 10:13:56 +05:30

tinyproxy

tinyproxy: patch CVE-2025-63938

2026-01-12 08:12:13 +05:30

tnftp

tnftp: switch the SRC_URI to https

2024-04-14 08:38:39 -07:00

traceroute

traceroute: upgrade 2.1.3 -> 2.1.5

2024-01-08 19:54:45 -08:00

tunctl

…

uftp

uftp: upgrade 5.0.2 -> 5.0.3

2023-12-29 09:04:16 -08:00

unbound

unbound: Fix CVE-2025-11411

2026-04-13 12:40:21 +05:30

vnstat

…

wavemon

wavemon: add recipe for version 0.9.5

2024-02-21 19:59:52 -08:00

wireshark

wireshark: Fix CVE-2026-0960

2026-03-24 08:52:08 +05:30

wpan-tools

…