COMMITS
July 22, 2026
W
- Fix CVE-2026-55990, Packet of death for a DNSCrypt misconfigured
W.C.A. Wijngaards committed
W
- Fix CVE-2026-55973, 'dns-error-reporting: yes' leads to stack buffer
W.C.A. Wijngaards committed
W
- Fix CVE-2026-55717, 'serve-expired-client-timeout' and 'response-ip'
W.C.A. Wijngaards committed
W
- Fix CVE-2026-55708, Privacy/configuration issue when adding local
W.C.A. Wijngaards committed
W
- Fix CVE-2026-54478, DNS Cookie bypass when combined with
W.C.A. Wijngaards committed
W
- Fix CVE-2026-52863, Memory corruption could lead to crash and
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50252, Possible cache poisoning attack by mapping
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50251, Attacker supplied `0.0.0.0`/`::` glue triggers
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50248, BOGUS configured primary hostname accepted for
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50243, 'response-ip'/'rpz' can rewrite BOGUS answers
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50046, Possible heap use-after-free in an error path
W.C.A. Wijngaards committed
W
- Fix CVE-2026-50045, 'max-global-quota' reset by DNSSEC validation
W.C.A. Wijngaards committed
W
- Fix CVE-2026-44690, Cross-zone wildcard cache poisoning via
W.C.A. Wijngaards committed
W
- Fix CVE-2026-44687, Off-by-one error in 'harden-below-nxdomain'
W.C.A. Wijngaards committed
W
- Fix CVE-2026-44621, Libunbound applications configured with
W.C.A. Wijngaards committed
W
- Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp
W.C.A. Wijngaards committed
W
- Fix CVE-2026-41637, Degradation of resolution service from
W.C.A. Wijngaards committed
W
- Fix CVE-2026-40691, Packet of death for DNSCrypt over TCP. Thanks
W.C.A. Wijngaards committed
W
- Fix CVE-2026-32665, Remote DNS-over-QUIC denial of
W.C.A. Wijngaards committed
W
- Fix CVE-2026-14586, Assertion in libngtcp2 when under pressure
W.C.A. Wijngaards committed
W
- Fix CVE-2026-46582, A wildcard replay, as another piece of data,
W.C.A. Wijngaards committed
W
Set version to 1.25.2
W.C.A. Wijngaards committed
July 21, 2026
W
Changelog note for #1476
W.C.A. Wijngaards committed
P
ipsecmod: fix possible deref on null after reply_find_answer_rrset() (#1476)
Petr Vaganov committed
July 20, 2026
W
- Fix #1474: DoQ responses are never padded - pad-responses
W.C.A. Wijngaards committed
W
Changelog entry for #1475
W.C.A. Wijngaards committed
P
ipsecmod: fix deref on null in ipsecmod-whitelist after OOM (#1475)
Petr Vaganov committed
July 9, 2026
W
- Fix unit test for malformed svcb for test on Windows.
W.C.A. Wijngaards committed
W
Changelog note and explanation comment for #1383
W.C.A. Wijngaards committed
J
- Fix randomness generation on macOS/iOS under chroot (#1383)
J. Dekker committed