[Bug network/34033] resolv/ns_print.c: ns_sprintrrf TSIG path bypasses buflen and can overflow caller buffer
"cvs-commit at gcc dot gnu.org via Glibc-bugs" <[email protected]>
| Newsgroups | gmane.comp.lib.glibc.bugs |
|---|---|
| Message-ID | <[email protected]/bugzilla/> |
https://sourceware.org/bugzilla/show_bug.cgi?id=34033 --- Comment #12 from Sourceware Commits <cvs-commit at gcc dot gnu.org> --- The release/2.41/master branch has been updated by Aurelien Jarno <[email protected]>: https://sourceware.org/git/gitweb.cgi?p=glibc.git;h=0e8c56b386d72ba2ddf15784423f2e894c63a241 commit 0e8c56b386d72ba2ddf15784423f2e894c63a241 Author: Florian Weimer <[email protected]> Date: Fri Jun 19 18:22:20 2026 +0200 resolv: More types as unknown in ns_sprintrrf (CVE-2026-5435) Specifically, CERT, TKEY, TSIG, OPT. This removes the buggy implementations of TSIG, fixing bug 34033, and partially fixing bug 34069. Reviewed-by: Carlos O'Donell <[email protected]> Reviewed-by: Adhemerval Zanella <[email protected]> (cherry picked from commit ca44a6609c29a683b03575fa035c6d17aa591e72) -- You are receiving this mail because: You are on the CC list for the bug.