The iSNS daemon and utility programs
Backport upstream fix for CVE-2026-55995 to isns-utils.
The patch adds NULL pointer assignments after isns_free()
calls in two error paths in attrs.c
(isns_attr_type_string_decode and isns_attr_type_opaque_decode)
to prevent double-free vulnerabilities that could lead to
denial-of-service attacks.
CVE: CVE-2026-55995
Upstream patches:
-
|
||
|---|---|---|
| .gitignore | ||
| fix-openssl-argument-order-in-tests.patch | ||
| gating.yaml | ||
| isns-utils-0.99-CVE-2026-55995.patch | ||
| isns-utils.spec | ||
| sources | ||
| test_as_installed.patch | ||