From: Arаm Sаrgsyаn <aram@isc.org>
Date: Mon, 15 Jun 2026 11:35:12 +0000 (+0000)
Subject: fix: usr: Fix a 'deny-answer-aliases' configuration bypass issue
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=50dbab93404dad8df73ec063a47ae26e709bb3d2;p=thirdparty%2Fbind9.git

fix: usr: Fix a 'deny-answer-aliases' configuration bypass issue

It was possible to use a maliciously crafted authoritative
zone to make :iscman:`named` resolver synthesize a ``DNAME``
"alias" that should have been rejected by the configured
:any:`deny-answer-aliases` option. This has been fixed.

Closes #5930

Merge branch '5930-deny-answer-aliases-and-cached-dname-buf-fix' into 'main'

See merge request isc-projects/bind9!12044
---

50dbab93404dad8df73ec063a47ae26e709bb3d2