SECURITY ANNOUNCEMENT

CVE-2026-99030

23 October 2026

won't match the data any more, so the receiver will usually drop the packet, but either way it no longer carries anything it shouldn't. Only zero for a positive @len, a negative one from a broken caller must

Introduced

6.1265249feb6b3df9e17bab5911ee56fa7b0971e231

Fixed releases

6.12.1135f19b9cfff79508e8cb09be40d014cb0807f3854

6.18.575551399751e2c9f31e4f3428040985a07e79d9c2

7.2.1139d1a6b601831237c6038b5e3ac8dbb883c1700a

7.3ab9414ed70bd783e902a85c350620dee269bcb2b

View source announcement ↗