]> git.ipfire.org Git - thirdparty/unbound.git/commit
- Additional fix for CVE-2025-11411 (possible domain hijacking attack), branch-1.24.2 release-1.24.2
authorYorgos Thessalonikefs <yorgos@nlnetlabs.nl>
Wed, 26 Nov 2025 10:09:40 +0000 (11:09 +0100)
committerYorgos Thessalonikefs <yorgos@nlnetlabs.nl>
Wed, 26 Nov 2025 10:09:40 +0000 (11:09 +0100)
commitf6269baa605d31859f28770e01a24e3677e5f82c
tree0992a4600a66f01cde793cbae36897f49b7721bb
parent19154c6e584d9d6ce0a0ea72dfdb23a058af84d2
- Additional fix for CVE-2025-11411 (possible domain hijacking attack),
  to include YXDOMAIN and non-referral nodata answers in the mitigation as
  well, reported by TaoFei Guo from Peking University, Yang Luo and JianJun
  Chen from Tsinghua University.
iterator/iter_scrub.c
testdata/iter_scrub_promiscuous.rpl
testdata/ratelimit.tdir/ratelimit.testns