[PATCH] resolv: Count records, and check hostname (CVE-2026-4437, CVE-2026-4438)

Collin Funk collin.funk1@gmail.com
Fri Mar 20 20:27:44 GMT 2026


Carlos O'Donell <carlos@redhat.com> writes:

>
> The justification is in the commit log? :-)
> ~~~
> These two issues are considered distinct CVEs, but are fixed in one
> commit to make the update process easier, given that they change the
> same file and function.
> ~~~
>  > Why not split this into two?  That makes the accompanying advisory
>   text
>> clearer, too.
>
> Would you still like them split up?
>
> I don't have a strong opinion.

FWIW, I think separate patches makes things easier to review.

Collin


More information about the Libc-alpha mailing list