Mirror of git.openembedded.org/meta-openembedded https://git.enea.com/cgit/linux/meta-openembedded.git/atom?h=scarthgap 2026-04-13T07:10:21+00:00 2026-04-13T07:10:21+00:00 Jackson James jackson.james9803@gmail.com 2026-04-10T06:41:12+00:00 urn:sha1:fc30bb5eedfa89070a112425bcf8423a7b2aa998 Backport complete patch to fix CVE-2025-11411 The existing scarthgap patch is a partial backport with hardcoded logic, causing incorrect behavior and ptest failures. Backport the full upstream fix along with the follow-up patch to ensure correct functionality. Add below patch to fix 0001-CVE-2025-11411-1.patch 0002-CVE-2025-11411-2.patch Signed-off-by: Jackson James <jacksonj2@kpit.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2026-01-12T02:42:27+00:00 Naman Jain nmjain23@gmail.com 2025-11-04T09:52:56+00:00 urn:sha1:30dafc39583af496a300155620efd0275c79f25b A multi-vendor cache poisoning vulnerability named 'Rebirthday Attack' has been discovered in caching resolvers that support EDNS Client Subnet (ECS). Unbound is also vulnerable when compiled with ECS support, i.e., '--enable-subnet', AND configured to send ECS information along with queries to upstream name servers CVE: CVE-2025-5994 Signed-off-by: Naman Jain <namanj1@kpit.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-12-17T06:15:23+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2025-12-16T07:15:35+00:00 urn:sha1:788904cef140e7dea251c24747a36e232d773f06 Details https://nvd.nist.gov/vuln/detail/CVE-2024-43168 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-12-17T06:15:22+00:00 Ankur Tyagi ankur.tyagi85@gmail.com 2025-12-16T07:15:34+00:00 urn:sha1:1876b4656d6d3f210f4a3cd806db0ef9a6755eab Details https://nvd.nist.gov/vuln/detail/CVE-2024-43167 Signed-off-by: Ankur Tyagi <ankur.tyagi85@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-11-12T06:08:29+00:00 Gyorgy Sarvari skandigraun@gmail.com 2025-11-09T16:00:12+00:00 urn:sha1:6eb226f7c5bf9bc5dd5cc05adf9a85c1180d1e0d The branch used in the SRC_URI got deleted, and the used revision is detached from all branches. Use nobranch tag in the SRC_URI to avoid fetching failures. Signed-off-by: Gyorgy Sarvari <skandigraun@gmail.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-11-12T05:44:56+00:00 Patrick Vogelaar patrick.vogelaar@belden.com 2025-11-02T21:33:37+00:00 urn:sha1:d9c8972cb71a85ce6dfcfce55477937ea954b1ce For CVE-2024-33655 applied patch [1] mentioned in [2]. For CVE-2025-11411 applied minimal patch [3] mentioned in [4]. (Slightly adjustments were required to apply properly) [1] https://nlnetlabs.nl/downloads/unbound/patch_CVE-2024-33655.diff [2] https://www.nlnetlabs.nl/downloads/unbound/CVE-2024-33655.txt [3] https://nlnetlabs.nl/downloads/unbound/patch_CVE-2025-11411.diff [4] https://www.nlnetlabs.nl/downloads/unbound/CVE-2025-11411.txt Signed-off-by: Patrick Vogelaar <patrick.vogelaar@belden.com> Signed-off-by: Anuj Mittal <anuj.mittal@oss.qualcomm.com> 2025-03-08T00:40:44+00:00 Virendra Thakur virendrak@kpit.com 2025-03-04T09:12:08+00:00 urn:sha1:454cc113175e42d803fe09d5a6c495c369b5a68a Malicious upstreams responses with very large RRsets can cause Unbound to spend a considerable time applying name compression to downstream replies. This can lead to degraded performance and eventually denial of service in well orchestrated attacks. Reference: https://nvd.nist.gov/vuln/detail/cve-2024-8508 Signed-off-by: Virendra Thakur <virendrak@kpit.com> Signed-off-by: Armin Kuster <akuster808@gmail.com> 2024-04-07T15:36:35+00:00 Beniamin Sandu beniaminsandu@gmail.com 2024-04-05T15:06:46+00:00 urn:sha1:880f80650080a12c1eef94e6205c5157057904e1 Includes security fixes for: CVE-2024-1931 - Loop with Unreachable Exit Condition ('Infinite Loop') Full release notes: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.3 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2024-02-20T16:46:27+00:00 Wang Mingyu wangmy@fujitsu.com 2024-02-20T08:54:16+00:00 urn:sha1:2adbf07ec1ffa08cb04e47907fa4b385edefed98 Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com> 2023-11-15T20:58:37+00:00 Beniamin Sandu beniaminsandu@gmail.com 2023-11-15T20:45:33+00:00 urn:sha1:24e6bcb3759f6dc331a6716a12124e6cfaa72c0a Full changelog: https://github.com/NLnetLabs/unbound/releases/tag/release-1.19.0 Signed-off-by: Beniamin Sandu <beniaminsandu@gmail.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>