]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: usr: Resolver could terminate unexpectedly when processing a malformed RRSIG
authorOndřej Surý <ondrej@isc.org>
Thu, 2 Jul 2026 11:27:00 +0000 (13:27 +0200)
committerOndřej Surý <ondrej@isc.org>
Thu, 2 Jul 2026 11:27:00 +0000 (13:27 +0200)
A recursive resolver could terminate unexpectedly when an authoritative
server returned a crafted RRSIG(RRSIG) record for an insecure zone. Such
records are now rejected.

Closes #6184

Merge branch '6184-reject-rrsig-covering-signature' into 'main'

See merge request isc-projects/bind9!12347


Trivial merge