[OpenSIPS-Devel] [OpenSIPS/opensips] 392514: [stir-shaken] fix heap-buffer-overflow in stir_sha...

[Bogdan Andrei IANCU]

  Branch: refs/heads/3.6
  Home:   https://github.com/OpenSIPS/opensips
  Commit: 3925140275726f5fcf36719578293a91305622e1
      https://github.com/OpenSIPS/opensips/commit/3925140275726f5fcf36719578293a91305622e1
  Author: Bogdan-Andrei Iancu <bogdan at opensips.org>
  Date:   2026-06-15 (Mon, 15 Jun 2026)

  Changed paths:
    M modules/stir_shaken/stir_shaken.c

  Log Message:
  -----------
  [stir-shaken] fix heap-buffer-overflow in stir_shaken_disengagement()

Credits for reporting and fixing go to Yukimura Aneha from BroadBand Security, Inc (yuk_aneha at bbsec.co.jp)
https://github.com/OpenSIPS/opensips/security/advisories/GHSA-qr87-6xwg-29p3

(cherry picked from commit 5bd393d0151e4636cdfe78f4317ecf3ac447dd9a)



To unsubscribe from these emails, change your notification settings at https://github.com/OpenSIPS/opensips/settings/notifications