W.C.A. Wijngaards bd71e3b8a6 - Fix CVE-2026-77860, 'serve-expired' can bypass Unbound 'wait-limit'. ...

Thanks to Xuanchao Xie, Lutong Chen, and Kaiping Xue from the
  University of Science and Technology of China (USTC) for the
  report.

2026-09-16 09:29:04 +02:00

..

cache

- Fix to use tls-port after referral if tls-upstream is set.

2026-07-24 15:31:06 +02:00

authzone.c

- Fix CVE-2026-77955, Possible ZONEMD verification bypass window.

2026-09-16 09:26:00 +02:00

authzone.h

- Fix CVE-2026-77955, Possible ZONEMD verification bypass window.

2026-09-16 09:26:00 +02:00

listen_dnsport.c

- Fix CVE-2026-78227, Use-after-free in DoQ stream output buffer on

2026-09-16 09:25:05 +02:00

listen_dnsport.h

- Fix CVE-2026-80225, Possible degradation of service from continuous

2026-09-16 09:16:29 +02:00

localzone.c

- Fix #1477: respip + dns64: dns64 uses A records modified by

2026-07-24 09:29:17 +02:00

localzone.h

- Fix #1477: respip + dns64: dns64 uses A records modified by

2026-07-24 09:29:17 +02:00

mesh.c

- Fix CVE-2026-77860, 'serve-expired' can bypass Unbound 'wait-limit'.

2026-09-16 09:29:04 +02:00

mesh.h

- Fix mesh cycle detection for configuration with respip CNAME

2026-07-23 16:28:45 +02:00

modstack.c

- Fix modstack_call_init to use the original string when it has

2025-09-29 11:31:50 +02:00

modstack.h

Fix typos (#1299)

2025-07-02 10:50:49 +02:00

outbound_list.c

And fix #551 REGENT to COPYRIGHT HOLDER in license in file headings.

2014-02-07 13:28:39 +00:00

outbound_list.h

Fix typos

2021-11-13 16:56:15 +02:00

outside_network.c

- Fix sign of comparison warning in shared ports setup.

2026-07-24 14:44:44 +02:00

outside_network.h

Merge branch 'branch-1.25.2'

2026-07-22 11:33:54 +02:00

rpz.c

- Fix to check for malloc failure in rpz response create,

2026-06-17 15:59:29 +02:00

rpz.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

view.c

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00

view.h

Fast Reload Option (#1042)

2025-03-31 15:25:24 +02:00