]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[CVE-2026-5947] sec: usr: Fix crash in resolver when SIG(0)-signed responses are...
authorOndřej Surý <ondrej@isc.org>
Fri, 1 May 2026 06:07:20 +0000 (08:07 +0200)
committerMichał Kępień <michal@isc.org>
Thu, 7 May 2026 11:32:15 +0000 (13:32 +0200)
A resolver could crash when handling a SIG(0)-signed response if the
matching client query was cancelled while signature verification was
still in progress — for example, when the recursive-clients quota
was exhausted. This has been fixed.

Closes isc-projects/bind9#5819

Merge branch '5819-fix-heap-use-after-free-in-resquery_response_continue' into 'security-main'

See merge request isc-private/bind9!964


Trivial merge