From: Evan Hunt <each@isc.org>
Date: Wed, 24 Jun 2026 21:04:20 +0000 (+0000)
Subject: fix: usr: Check that an NSEC signer is at or above the name to be validated
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=89e57b45e024cf1600ca779e2075fd296882fac1;p=thirdparty%2Fbind9.git

fix: usr: Check that an NSEC signer is at or above the name to be validated

Add a check that an NSEC record being used as a proof of nonexistence
for a given name is not signed by a name lower in the DNS hierarchy than
the one in question.

Closes #5876

Merge branch '5876-nsec-signer-above-name' into 'main'

See merge request isc-projects/bind9!12272
---

89e57b45e024cf1600ca779e2075fd296882fac1