From: Mark Andrews Date: Mon, 15 Jun 2026 01:29:54 +0000 (+1000) Subject: [CVE-2026-10822] sec: usr: Malformed DNSKEY records could trigger an assertion X-Git-Tag: v9.21.24~13 X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=f8baa18e2444cdd549e6b2d63ed456a34c3d07e5;p=thirdparty%2Fbind9.git [CVE-2026-10822] sec: usr: Malformed DNSKEY records could trigger an assertion Previously, `dns_name_fromwire()` did not honor the record boundary when reading names from the wire, allowing malformed records to be accepted when they should not have been. In particular, malformed DNSKEY records could trigger an assertion failure when being printed. This has been fixed. Closes: https://gitlab.isc.org/isc-projects/bind9/-/issues/6004 Merge branch '6004-confidential-issue' into 'security-main' See merge request isc-private/bind9!1040 --- f8baa18e2444cdd549e6b2d63ed456a34c3d07e5