mirror/buildroot
1
0
Fork 0
mirror of https://gitlab.com/buildroot.org/buildroot.git synced 2026-09-30 22:11:59 -09:00
Code Issues Packages Projects Releases Wiki Activity

package/unbound: mark CVE-2025-5994 as not applicable

Browse Source 
Unbound is vulnerable to CVE-2025-5994: "Cache poisoning via the ECS-enabled
Rebirthday Attack" if built with --enable-subnet, which is not the case in
Buildroot, so mark it as not applicable.

https://nlnetlabs.nl/downloads/unbound/CVE-2025-5994.txt

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
This commit is contained in:
Peter Korsgaard
2025-08-28 12:01:44 +02:00
parent c719a73a21
commit c7721b0174
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
package/unbound/unbound.mk
View File

@@ -23,6 +23,9 @@ UNBOUND_CONF_OPTS = \
--with-libexpat=$(STAGING_DIR)/usr \ --with-libexpat=$(STAGING_DIR)/usr \
--with-ssl=$(STAGING_DIR)/usr --with-ssl=$(STAGING_DIR)/usr
# Only vulnerable if built with --enable-subnet
UNBOUND_IGNORE_CVES += CVE-2025-5994
ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y) ifeq ($(BR2_TOOLCHAIN_HAS_THREADS_NPTL),y)
UNBOUND_CONF_OPTS += --with-pthreads UNBOUND_CONF_OPTS += --with-pthreads
else else