From: Matthijs Mekking <matthijs@isc.org>
Date: Tue, 7 Jul 2026 11:11:57 +0000 (+0000)
Subject: [CVE-2026-13204] fix: usr: Prevent crash from malformed NSEC/NSEC3 response
X-Git-Tag: v9.21.24~3
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=a15f86b758f7b6057a48176c2687f66f42f7c416;p=thirdparty%2Fbind9.git

[CVE-2026-13204] fix: usr: Prevent crash from malformed NSEC/NSEC3 response

An assertion could be triggered by an improperly signed NOQNAME proof. This has been fixed.

ISC thanks Qifan Zhang of Palo Alto Networks for reporting the issue.

Closes https://gitlab.isc.org/isc-projects/bind9/-/issues/5985

Merge branch '5985-confidential-addnoqname' into 'security-main'

See merge request isc-private/bind9!1039
---

a15f86b758f7b6057a48176c2687f66f42f7c416