]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
projects / thirdparty / bind9.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: cef614c 18f4db8)
fix: usr: Reject external referrals from forwarders
authorAlessio Podda <alessio@isc.org>
Thu, 18 Jun 2026 12:48:39 +0000 (12:48 +0000)
committerAlessio Podda <alessio@isc.org>
Thu, 18 Jun 2026 12:48:39 +0000 (12:48 +0000)
Under `forward-first` policy in a forwarding zone BIND could accept NS above the forward zone apex from negative responses. This has been fixed.

ISC would like to thank Qifan Zhang, of Palo Alto Networks, for the report.

Closes #5937

Merge branch '5937-fix-forward-first-referral-bailiwick-v2' into 'main'

See merge request isc-projects/bind9!12154


Trivial merge
Mirror of https://gitlab.isc.org/isc-projects/bind9.git