From noreply at github.com Thu Jun 20 04:45:20 2024 From: noreply at github.com (Lucas Holt) Date: Thu, 20 Jun 2024 01:45:20 -0700 Subject: [Midnightbsd-cvs] [MidnightBSD/src] 900802: Due to a bug in the library's configuration file p... Message-ID: <MidnightBSD/src/push/refs/heads/master/625dbe-900802@github.com> Branch: refs/heads/master Home: https://github.com/MidnightBSD/src Commit: 9008029caa5ea8e71780152a3582fbab85055010 https://github.com/MidnightBSD/src/commit/9008029caa5ea8e71780152a3582fbab85055010 Author: Lucas Holt <luke at foolishgames.com> Date: 2024-06-20 (Thu, 20 Jun 2024) Changed paths: M contrib/ldns/ldns/parse.h M contrib/ldns/parse.c M contrib/ldns/resolver.c Log Message: ----------- Due to a bug in the library's configuration file parser, commented out configuration settings in /etc/resolv.conf were picked up by the LDNS resolver, potentially leading to malfunction and/or information leakage. This included, but was not limited to, the nameserver setting. Given this example # /etc/resolv.conf # nameserver 8.8.8.8 nameserver 127.0.0.1 DNS requests were sent to the commented out external resolver instead of the local one. Obtained from: FreeBSD To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications From noreply at github.com Thu Jun 20 04:45:31 2024 From: noreply at github.com (Lucas Holt) Date: Thu, 20 Jun 2024 08:45:31 +0000 (UTC) Subject: [Midnightbsd-cvs] [MidnightBSD/src] ebc398: Due to a bug in the library's configuration file p... Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.2/00ef8e-ebc398@github.com> Branch: refs/heads/stable/3.2 Home: https://github.com/MidnightBSD/src Commit: ebc3981903f0f5a7c3f0a56373f3f90229eb51a4 https://github.com/MidnightBSD/src/commit/ebc3981903f0f5a7c3f0a56373f3f90229eb51a4 Author: Lucas Holt <luke at foolishgames.com> Date: 2024-06-20 (Thu, 20 Jun 2024) Changed paths: M contrib/ldns/ldns/parse.h M contrib/ldns/parse.c M contrib/ldns/resolver.c Log Message: ----------- Due to a bug in the library's configuration file parser, commented out configuration settings in /etc/resolv.conf were picked up by the LDNS resolver, potentially leading to malfunction and/or information leakage. This included, but was not limited to, the nameserver setting. Given this example # /etc/resolv.conf # nameserver 8.8.8.8 nameserver 127.0.0.1 DNS requests were sent to the commented out external resolver instead of the local one. Obtained from: FreeBSD To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications