]> git.ipfire.org Git - thirdparty/bind9.git/commit
amend! Add non-IN RR classes to list of unsupported configurations
authorNicki Křížek <nicki@isc.org>
Mon, 29 Jun 2026 13:34:29 +0000 (13:34 +0000)
committerOndřej Surý <ondrej@isc.org>
Wed, 1 Jul 2026 11:05:11 +0000 (13:05 +0200)
commitfc06f799dce67fe1e7891357879230dddcc5e19d
tree2adc36ec4deb784de853ac24aea8b49f7198e629
parent7b34d6083331dcdfd08881c646a6c6092d838555
amend! Add non-IN RR classes to list of unsupported configurations

Document that non-IN RR class issues are out of CVE scope

CVE-2026-5946 covered assertion failures reachable only through the
handling of resource record classes other than Internet (IN).
Configuring zones or views with such classes is a supported feature;
document in the security assumptions that problems reachable only
through it cannot be the basis for CVE assignment.

Closes #5805

Assisted-by: Claude:claude-opus-4-8
doc/arm/security.inc.rst