PT-2026-63380

In NLnet Labs Unbound 1.15.0 up to and including 1.25.1, the TLS server name used for DNS-over-TLS DoT forwarded queries is tied to a struct's 'serviced query' lifetime but also referenced by another struct 'waiting tcp'. When the owning struct is jostled out of the mesh while the DoT TCP stream ...