]> git.ipfire.org Git - thirdparty/bind9.git/commit
[9.20] chg: usr: Fix a resolver stall on a CNAME response to a DS query
authorOndřej Surý <ondrej@isc.org>
Sat, 30 May 2026 06:02:13 +0000 (08:02 +0200)
committerOndřej Surý <ondrej@isc.org>
Sat, 30 May 2026 06:02:13 +0000 (08:02 +0200)
commit1407f48670dd4007c9cfce1c97ae2d9cf5785ece
treeeaa0787da24c5ca06623b6339602bfbdc31d8bda
parent787faa02a7f11b228ae2fc3eb6d146ae1574efaa
parent088d909188c55f4ce26f85c303e565dd771631b1
[9.20] chg: usr: Fix a resolver stall on a CNAME response to a DS query

A validating resolver could stall for about twelve seconds and then return
SERVFAIL when an authoritative server answered a DS query with a CNAME. Such
responses are now rejected promptly, so the query fails fast instead of
hanging.

Closes #5878

Backport of MR !11867

Merge branch 'backport-5878-reject-cname-at-dnssec-types-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!12147