]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[9.20] [CVE-2026-3591] sec: usr: Fix a stack use-after-return flaw in SIG(0) handling...
authorMichał Kępień <michal@isc.org>
Fri, 13 Mar 2026 14:45:01 +0000 (15:45 +0100)
committerMichał Kępień <michal@isc.org>
Fri, 13 Mar 2026 14:45:01 +0000 (15:45 +0100)
A stack use-after-return flaw in SIG(0) handling code could enable ACL
bypass and/or assertion failures in certain circumstances. This flaw has
been fixed.

ISC would like to thank Mcsky23 for bringing this vulnerability to our
attention.

Closes isc-projects/bind9#5754

Backport of !920

Merge branch '5754-stack-use-after-free-sig0-9.20' into 'v9.20.21-release'

See merge request isc-private/bind9!931


Trivial merge