]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
projects / thirdparty / bind9.git / commitdiff
? search:
summary | shortlog | log | commit | commitdiff | tree
raw | combined (merge: aefb857 abd274c)
fix: usr: Unvalidated opt-out NSEC3 could be accepted in insecurity proof alessio/split-query-delegation-baseline
authorEvan Hunt <each@isc.org>
Fri, 3 Jul 2026 07:01:30 +0000 (07:01 +0000)
committerEvan Hunt <each@isc.org>
Fri, 3 Jul 2026 07:01:30 +0000 (07:01 +0000)
When determining whether an insecure delegation is legitimate, NSEC3 opt-out records which had not yet passed validation could be used. This has been fixed.

Closes #5970

Merge branch '5970-pending-nsec3' into 'main'

See merge request isc-projects/bind9!12283


Trivial merge
Mirror of https://gitlab.isc.org/isc-projects/bind9.git