{"id":2231096,"url":"http://patchwork.ozlabs.org/api/1.2/patches/2231096/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/patch/1bc94ca3ff4a1aafd1b6c4877d894e9bb1960808.1777546194.git.fweimer@redhat.com/","project":{"id":41,"url":"http://patchwork.ozlabs.org/api/1.2/projects/41/?format=json","name":"GNU C Library","link_name":"glibc","list_id":"libc-alpha.sourceware.org","list_email":"libc-alpha@sourceware.org","web_url":"","scm_url":"","webscm_url":"","list_archive_url":"","list_archive_url_format":"","commit_url_format":""},"msgid":"<1bc94ca3ff4a1aafd1b6c4877d894e9bb1960808.1777546194.git.fweimer@redhat.com>","list_archive_url":null,"date":"2026-04-30T10:52:07","name":"[3/5] resolv: Remove incorrect parts of TSIG handling from ns_sprintrrf (CVE-2026-5435)","commit_ref":null,"pull_url":null,"state":"new","archived":false,"hash":"288588f7d9a735f2a9366404c9ec46bd3d134c87","submitter":{"id":14312,"url":"http://patchwork.ozlabs.org/api/1.2/people/14312/?format=json","name":"Florian Weimer","email":"fweimer@redhat.com"},"delegate":null,"mbox":"http://patchwork.ozlabs.org/project/glibc/patch/1bc94ca3ff4a1aafd1b6c4877d894e9bb1960808.1777546194.git.fweimer@redhat.com/mbox/","series":[{"id":502273,"url":"http://patchwork.ozlabs.org/api/1.2/series/502273/?format=json","web_url":"http://patchwork.ozlabs.org/project/glibc/list/?series=502273","date":"2026-04-30T10:51:34","name":"Fixes for CVE-2026-5435, CVE-2026-6238","version":1,"mbox":"http://patchwork.ozlabs.org/series/502273/mbox/"}],"comments":"http://patchwork.ozlabs.org/api/patches/2231096/comments/","check":"pending","checks":"http://patchwork.ozlabs.org/api/patches/2231096/checks/","tags":{},"related":[],"headers":{"Return-Path":"","X-Original-To":["incoming@patchwork.ozlabs.org","libc-alpha@sourceware.org"],"Delivered-To":["patchwork-incoming@legolas.ozlabs.org","libc-alpha@sourceware.org"],"Authentication-Results":["legolas.ozlabs.org;\n\tdkim=pass (1024-bit key;\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=IXcBoymu;\n\tdkim-atps=neutral","legolas.ozlabs.org;\n spf=pass (sender SPF authorized) smtp.mailfrom=sourceware.org\n (client-ip=38.145.34.32; helo=vm01.sourceware.org;\n envelope-from=libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org;\n receiver=patchwork.ozlabs.org)","sourceware.org;\n\tdkim=pass (1024-bit key,\n unprotected) header.d=redhat.com header.i=@redhat.com header.a=rsa-sha256\n header.s=mimecast20190719 header.b=IXcBoymu","sourceware.org; dmarc=pass (p=quarantine dis=none)\n header.from=redhat.com","sourceware.org; spf=pass smtp.mailfrom=redhat.com","server2.sourceware.org;\n arc=none smtp.remote-ip=170.10.133.124"],"Received":["from vm01.sourceware.org (vm01.sourceware.org [38.145.34.32])\n\t(using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n\t key-exchange x25519 server-signature ECDSA (secp384r1) server-digest SHA384)\n\t(No client certificate requested)\n\tby legolas.ozlabs.org (Postfix) with ESMTPS id 4g5rdl633Yz1yGq\n\tfor ; Thu, 30 Apr 2026 20:54:19 +1000 (AEST)","from vm01.sourceware.org (localhost [127.0.0.1])\n\tby sourceware.org (Postfix) with ESMTP id 1BECF4371D59\n\tfor ; Thu, 30 Apr 2026 10:54:17 +0000 (GMT)","from us-smtp-delivery-124.mimecast.com\n (us-smtp-delivery-124.mimecast.com [170.10.133.124])\n by sourceware.org (Postfix) with ESMTP id 17165436A040\n for ; Thu, 30 Apr 2026 10:52:14 +0000 (GMT)","from mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com\n (ec2-35-165-154-97.us-west-2.compute.amazonaws.com [35.165.154.97]) by\n relay.mimecast.com with ESMTP with STARTTLS (version=TLSv1.3,\n cipher=TLS_AES_256_GCM_SHA384) id us-mta-680-0aeMmJ_2NR-QWAQbI5r7CQ-1; Thu,\n 30 Apr 2026 06:52:12 -0400","from mx-prod-int-03.mail-002.prod.us-west-2.aws.redhat.com\n (mx-prod-int-03.mail-002.prod.us-west-2.aws.redhat.com [10.30.177.12])\n (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits)\n key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest\n SHA256)\n (No client certificate requested)\n by mx-prod-mc-06.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with ESMTPS\n id 7D4C71800347\n for ; Thu, 30 Apr 2026 10:52:11 +0000 (UTC)","from fweimer-oldenburg.csb.redhat.com (unknown [10.44.48.4])\n by mx-prod-int-03.mail-002.prod.us-west-2.aws.redhat.com (Postfix) with\n ESMTPS\n id C633519560A6\n for ; Thu, 30 Apr 2026 10:52:10 +0000 (UTC)"],"DKIM-Filter":["OpenDKIM Filter v2.11.0 sourceware.org 1BECF4371D59","OpenDKIM Filter v2.11.0 sourceware.org 17165436A040"],"DMARC-Filter":"OpenDMARC Filter v1.4.2 sourceware.org 17165436A040","ARC-Filter":"OpenARC Filter v1.0.0 sourceware.org 17165436A040","ARC-Seal":"i=1; a=rsa-sha256; d=sourceware.org; s=key; t=1777546334; cv=none;\n b=jzHXsHXIu1ANwHBuM+m3fbScOixsV62TRKgluaXtANy//OqZIMhcLgCc2mo63SOWa7ep8wnXtf2zv0s1eayLgdu6HTpB1q+Azu8VgTiDargFc3LZc7TWYycxRpoUrWFqTFTxoyZ6O3wZ8CWw2sM3hcIDqDa5oardmz8TVPmboys=","ARC-Message-Signature":"i=1; a=rsa-sha256; d=sourceware.org; s=key;\n t=1777546334; c=relaxed/simple;\n bh=MfD0YgrsiTgiCMaFVr5ALQsOVneqEWomA6Od+P6OrmY=;\n h=DKIM-Signature:From:To:Subject:Message-ID:Date:MIME-Version;\n b=tYbGXh+1ET1nxv9cabnP5fBhAKnisaIw+7xibrYdQtAKvivnnx1P89lHYUrDf4LY7pKzYxj4x+ybj5GpWzNMRp/bR/BAyOwPDCgeN90YoHtDquLp9cy3MZAlX3Ak1qAU4Sg9uiH6wf4IhtvShk5gfwKhYo997MF11IPNZyYp8w4=","ARC-Authentication-Results":"i=1; server2.sourceware.org","DKIM-Signature":"v=1; a=rsa-sha256; c=relaxed/relaxed; d=redhat.com;\n s=mimecast20190719; t=1777546333;\n h=from:from:reply-to:subject:subject:date:date:message-id:message-id:\n to:to:cc:mime-version:mime-version:content-type:content-type:\n in-reply-to:in-reply-to:references:references;\n bh=osqW8S54gu9Ps0zn+VcjzrzAXHKL6AsNTsvpdMo6e0w=;\n b=IXcBoymueszBOux7QTKeWBgCnHyvnJEE958AyRCkS/HSp5s6aVjfr7WqUh+jdAXROHtwP4\n 19QAcsdxpPe4+rzOWYDheJ+jILHwpCH4whFBhFMscRHAmJ5dgL0MunB9br+f2MzdaTXYqo\n g35a1mbbmxB5J1BLecbpS6YvL4qUsTE=","X-MC-Unique":"0aeMmJ_2NR-QWAQbI5r7CQ-1","X-Mimecast-MFC-AGG-ID":"0aeMmJ_2NR-QWAQbI5r7CQ_1777546331","From":"Florian Weimer ","To":"libc-alpha@sourceware.org","Subject":"[PATCH 3/5] resolv: Remove incorrect parts of TSIG handling from\n ns_sprintrrf (CVE-2026-5435)","In-Reply-To":"","Message-ID":"\n <1bc94ca3ff4a1aafd1b6c4877d894e9bb1960808.1777546194.git.fweimer@redhat.com>","References":"","X-From-Line":"1bc94ca3ff4a1aafd1b6c4877d894e9bb1960808 Mon Sep 17 00:00:00 2001","Date":"Thu, 30 Apr 2026 12:52:07 +0200","User-Agent":"Gnus/5.13 (Gnus v5.13)","MIME-Version":"1.0","X-Scanned-By":"MIMEDefang 3.0 on 10.30.177.12","X-Mimecast-Spam-Score":"0","X-Mimecast-MFC-PROC-ID":"oe47CQ1UbhJ06U6cjEfUOMhC2X3C1o_lK9ZIJJnHjRM_1777546331","X-Mimecast-Originator":"redhat.com","Content-Type":"text/plain","X-BeenThere":"libc-alpha@sourceware.org","X-Mailman-Version":"2.1.30","Precedence":"list","List-Id":"Libc-alpha mailing list ","List-Unsubscribe":",\n ","List-Archive":"","List-Post":"","List-Help":"","List-Subscribe":",\n ","Errors-To":"libc-alpha-bounces~incoming=patchwork.ozlabs.org@sourceware.org"},"content":"TSIG handling was incomplete before. Given that this is an obsolete\ninterface, it does not seem worthwhile to complete the implementation.\n\nThis fixes bug 34033.\n---\n resolv/ns_print.c | 10 ----------\n 1 file changed, 10 deletions(-)","diff":"diff --git a/resolv/ns_print.c b/resolv/ns_print.c\nindex 5701e3d0c5..9c9e810781 100644\n--- a/resolv/ns_print.c\n+++ b/resolv/ns_print.c\n@@ -513,17 +513,7 @@ ns_sprintrrf(const u_char *msg, size_t msglen,\n \n \tcase ns_t_tsig: {\n \t\t/* BEW - need to complete this */\n-\t\tint n;\n-\n \t\tT(len = addname(msg, msglen, &rdata, origin, &buf, &buflen));\n-\t\tT(addstr(\" \", 1, &buf, &buflen));\n-\t\trdata += 8; /*%< time */\n-\t\tn = ns_get16(rdata); rdata += INT16SZ;\n-\t\trdata += n; /*%< sig */\n-\t\tn = ns_get16(rdata); rdata += INT16SZ; /*%< original id */\n-\t\tsprintf(buf, \"%d\", ns_get16(rdata));\n-\t\trdata += INT16SZ;\n-\t\taddlen(strlen(buf), &buf, &buflen);\n \t\tbreak;\n \t }\n \n","prefixes":["3/5"]}