You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Kevin Darbyshire-Bryant a3198061f8 dnsmasq: backport dnssec security fix ... CVE-2017-15107 An interesting problem has turned up in DNSSEC validation. It turns out that NSEC records expanded from wildcards are allowed, so a domain can include an NSEC record for *.example.org and an actual query reply could expand that to anything in example.org and still have it signed by the signature for the wildcard. So, for example !.example.org NSEC zz.example.org is fine. The problem is that most implementers (your author included, but also the Google public DNS people, powerdns and Unbound) then took that record to prove the nothing exists between !.example.org and zz.example.org, whereas in fact it only provides that proof between *.example.org and zz.example.org. This gives an attacker a way to prove that anything between !.example.org and *.example.org doesn't exists, when it may well do so. Signed-off-by: Kevin Darbyshire-Bryant <ldir@darbyshire-bryant.me.uk>		7 years ago
..
base-files	base-files: gpio switch: check if direction can be set	7 years ago
boot	uboot-envtools: add support for GL.iNet GL-AR750	7 years ago
devel	…
firmware	ipq-wifi: align AVM FRITZ!Box 4040's board-2.bin package	7 years ago
kernel	ath9k: discard undersized packets	7 years ago
libs	…
network	dnsmasq: backport dnssec security fix	7 years ago
system	ubox: update to latest git HEAD	7 years ago
utils	util-linux: add fstrim support	7 years ago
Makefile	build: remove package preconfig feature	7 years ago