diff options
| author | Gordon Tetlow <gordon@FreeBSD.org> | 2025-11-21 21:24:58 +0000 |
|---|---|---|
| committer | Gordon Tetlow <gordon@FreeBSD.org> | 2025-11-26 15:59:35 +0000 |
| commit | b01f35a4e19d8e204daa37c378344772e339247b (patch) | |
| tree | bd94b9c8110d03e7f02b3dc94af9a122f01f681d /share | |
| parent | 5f2dd3dfd72da7b49d1f9a7f889437480aa6f19e (diff) | |
Mitigate YXDOMAIN and nodata non-referral answer poisoning.
Add a fix to apply scrubbing of unsolicited NS RRSets (and their
respective address records) for YXDOMAIN and nodata non-referral
answers. This prevents a malicious actor from exploiting a possible
cache poison attack.
Obtained from: NLnet Labs
Security: FreeBSD-SA-25:10.unbound
Security: CVE-2025-11411
(cherry picked from commit 2a3a6a1771148a709c2d9694c1d66c41ce8dee79)
Diffstat (limited to 'share')
0 files changed, 0 insertions, 0 deletions