mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-08-08 08:30:47 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/unbound: mark CVE-2025-5994 as not applicable

Browse Source 
Unbound is vulnerable to CVE-2025-5994: "Cache poisoning via the ECS-enabled
Rebirthday Attack" if built with --enable-subnet, which is not the case in
Buildroot, so mark it as not applicable.

https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
(cherry picked from commit c7721b0174)
Signed-off-by: Titouan Christophe <titouan.christophe@mind.be>
This commit is contained in:
Peter Korsgaard
2025-08-28 12:01:44 +02:00
committed by Titouan Christophe
parent 575465c786
commit 18809021cc
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/unbound/unbound.mk
View File

@@ -23,6 +23,9 @@ UNBOUND_CONF_OPTS = \
--with-libexpat=$(STAGING_DIR)/usr \
--with-ssl=$(STAGING_DIR)/usr
# Only vulnerable if built with --enable-subnet
UNBOUND_IGNORE_CVES += CVE-2025-5994
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y)
UNBOUND_CONF_OPTS += --with-pthreads
else