]> git.ipfire.org Git - thirdparty/unbound.git/commit
projects / thirdparty / unbound.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 27f22b8) | patch
- Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp
authorW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Wed, 22 Jul 2026 08:11:04 +0000 (10:11 +0200)
committerW.C.A. Wijngaards <wouter@nlnetlabs.nl>
Wed, 22 Jul 2026 08:11:04 +0000 (10:11 +0200)
commit13ec8d0f261ee7900ac67cfece551e8a703d14b1
tree64c848bb95285503bb6d9cdb5aae0c086701c086tree | snapshot
parent27f22b88081eca4faf6b51194bd5088a034fcf33commit | diff
- Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp
  the TTL of A/AAAA records disallowing a one-time 'ghost domain'
  delegation renewal via glue records. Thanks to Qifan Zhang, Palo
  Alto Networks, for the report.
services/cache/rrset.c diff | blob | blame | history
testdata/iter_prefetch_fail.rpl diff | blob | blame | history
Mirror of https://github.com/NLnetLabs/unbound.git