From noreply at github.com  Thu Jun 20 04:45:20 2024
From: noreply at github.com (Lucas Holt)
Date: Thu, 20 Jun 2024 01:45:20 -0700
Subject: [Midnightbsd-cvs] [MidnightBSD/src] 900802: Due to a bug in the
 library's configuration file p...
Message-ID: <MidnightBSD/src/push/refs/heads/master/625dbe-900802@github.com>

  Branch: refs/heads/master
  Home:   https://github.com/MidnightBSD/src
  Commit: 9008029caa5ea8e71780152a3582fbab85055010
      https://github.com/MidnightBSD/src/commit/9008029caa5ea8e71780152a3582fbab85055010
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2024-06-20 (Thu, 20 Jun 2024)

  Changed paths:
    M contrib/ldns/ldns/parse.h
    M contrib/ldns/parse.c
    M contrib/ldns/resolver.c

  Log Message:
  -----------
  Due to a bug in the library's configuration file parser, commented out
configuration settings in /etc/resolv.conf were picked up by the LDNS
resolver, potentially leading to malfunction and/or information leakage.

This included, but was not limited to, the nameserver setting. Given
this example

  # /etc/resolv.conf

  # nameserver 8.8.8.8
  nameserver 127.0.0.1

DNS requests were sent to the commented out external resolver instead
of the local one.

Obtained from: FreeBSD



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications

From noreply at github.com  Thu Jun 20 04:45:31 2024
From: noreply at github.com (Lucas Holt)
Date: Thu, 20 Jun 2024 08:45:31 +0000 (UTC)
Subject: [Midnightbsd-cvs] [MidnightBSD/src] ebc398: Due to a bug in the
 library's configuration file p...
Message-ID: <MidnightBSD/src/push/refs/heads/stable/3.2/00ef8e-ebc398@github.com>

  Branch: refs/heads/stable/3.2
  Home:   https://github.com/MidnightBSD/src
  Commit: ebc3981903f0f5a7c3f0a56373f3f90229eb51a4
      https://github.com/MidnightBSD/src/commit/ebc3981903f0f5a7c3f0a56373f3f90229eb51a4
  Author: Lucas Holt <luke at foolishgames.com>
  Date:   2024-06-20 (Thu, 20 Jun 2024)

  Changed paths:
    M contrib/ldns/ldns/parse.h
    M contrib/ldns/parse.c
    M contrib/ldns/resolver.c

  Log Message:
  -----------
  Due to a bug in the library's configuration file parser, commented out
configuration settings in /etc/resolv.conf were picked up by the LDNS
resolver, potentially leading to malfunction and/or information leakage.

This included, but was not limited to, the nameserver setting. Given
this example

  # /etc/resolv.conf

  # nameserver 8.8.8.8
  nameserver 127.0.0.1

DNS requests were sent to the commented out external resolver instead
of the local one.

Obtained from: FreeBSD



To unsubscribe from these emails, change your notification settings at https://github.com/MidnightBSD/src/settings/notifications