]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
[CVE-2025-40775] sec: usr: Prevent assertion when processing TSIG algorithm
authorMichał Kępień <michal@isc.org>
Thu, 8 May 2025 20:45:48 +0000 (22:45 +0200)
committerMichał Kępień <michal@isc.org>
Thu, 8 May 2025 20:45:48 +0000 (22:45 +0200)
DNS messages that included a Transaction Signature (TSIG) containing an
invalid value in the algorithm field caused :iscman:`named` to crash
with an assertion failure. This has been fixed.  :cve:`2025-40775`

See isc-projects/bind9#5300

Merge branch '5300-confidential-tsig-unknown-alg' into 'v9.21.8-release'

See merge request isc-private/bind9!793


Trivial merge