gitea_admin
released this
2026-06-27 19:25:11 +00:00
| 37 commits to main since this release
Security
- rdata parsers (CERT, IPSECKEY, CSYNC, ZONEMD, SVCB): guard
rdlength - consumed
against integer underflow. A malformed record whose rdlength is shorter than its
fixed header made the length computation wrap — a panic in safe builds (a DoS on a
crafted packet), or an over-large read otherwise. These five now reject it with
PacketTooShort, matching the guard the other rdata parsers already had.
Downloads