CVE-2026-45447: Signature verification frees a message buffer twice

The signed-mail worker crashes while freeing a BIO after verifying a malformed PKCS#7 message. Contain the exposed path and restore the affected workflow without weakening its security boundary.

Jamie Engineering lead · 02:13 a.m.

Delivery tracking / af-south. Investigate signed-mail, restore service, and verify the result.