]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
fix: usr: Don't synthesize negative responses with pending NSEC
authorMatthijs Mekking <matthijs@isc.org>
Wed, 8 Jul 2026 12:05:26 +0000 (12:05 +0000)
committerMatthijs Mekking <matthijs@isc.org>
Wed, 8 Jul 2026 12:05:26 +0000 (12:05 +0000)
If an NSEC record has not yet been validated and is cached with trust
pending, don't use it to synthesize negative responses.

Closes #5872

Closes #5887

Closes #5977

Merge branch '5977-validate-synth-from-dnssec' into 'main'

See merge request isc-projects/bind9!12281


Trivial merge