From: Mark Andrews <marka@isc.org>
Date: Mon, 3 Feb 2025 02:18:09 +0000 (+0000)
Subject: fix: usr: validate adb fetches
X-Git-Tag: v9.21.5~10
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=d9eb272b69093f3b0a761e4d2c395f013444cf74;p=thirdparty%2Fbind9.git

fix: usr: validate adb fetches

ADB responses were not being validated, allowing spoofed responses to be accepted and used for further lookups. This should not be possible when the servers for the zone are in a signed zone, except with CD=1 requests or when glue is needed. This has been fixed.

Closes #5066

Merge branch '5066-validate-adb-fetches' into 'main'

See merge request isc-projects/bind9!10052
---

d9eb272b69093f3b0a761e4d2c395f013444cf74