git.ipfire.org Git - thirdparty/unbound.git/commit

]> git.ipfire.org Git - thirdparty/unbound.git/commit

projects / thirdparty / unbound.git / commit

author	W.C.A. Wijngaards <wouter@nlnetlabs.nl>
	Thu, 23 Jul 2026 14:17:59 +0000 (16:17 +0200)
committer	W.C.A. Wijngaards <wouter@nlnetlabs.nl>
	Thu, 23 Jul 2026 14:17:59 +0000 (16:17 +0200)
commit	5eb362a6c0da075fbf810c7247fc2cdbe50bc6e0
tree	53b4ce2fd340e540e6c26f326ddb09b294312f9d	tree \| snapshot
parent	0735cb28d151a56776e1b073c50d0c4775637df4	commit \| diff

- Fix that the aggressive negative cache does not insert NSEC
  records with overreaching next owner name. Also the result
  is not above the trust anchor's bailiwick. Also RRSIGS are
  not considered valid when an NSEC next owner name is not
  under the signer zone name. Thanks to Qifan Zhang, Palo
  Alto Networks, for the report.

doc/Changelog		diff \| blob \| blame \| history
iterator/iterator.c		diff \| blob \| blame \| history
testdata/nsec_cross_zone.rpl	[new file with mode: 0644]	blob
testdata/stop_nxdomain_minimised.rpl		diff \| blob \| blame \| history
validator/val_neg.c		diff \| blob \| blame \| history
validator/val_sigcrypt.c		diff \| blob \| blame \| history
validator/val_utils.c		diff \| blob \| blame \| history
validator/val_utils.h		diff \| blob \| blame \| history

Mirror of https://github.com/NLnetLabs/unbound.git

RSS Atom