2 matches found
CLSA-2026-1779533909 unbound: Fix of 3 CVEs
CVE-2026-33278: dangling pointer dereference in dnsmsgdeepcopyregion during DS sub-query suspend/resume; the previously-backported CVE-2023-50387-CVE-2023-50868.patch dragged the vulnerable 'res-rep = origin-rep;' struct-assignment into our 1.16.2 tree. Save the destination rrsets pointer,...
CLSA-2026-1779467733 unbound: Fix of CVE-2026-33278
CVE-2026-33278: fix dangling pointer use-after-free in dnsmsgdeepcopyregion...