From: Matthijs Mekking <matthijs@isc.org>
Date: Wed, 8 Jul 2026 12:05:26 +0000 (+0000)
Subject: fix: usr: Don't synthesize negative responses with pending NSEC
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=10b8edb27f50bc7da254cbc29a75fba5ecb82cc4;p=thirdparty%2Fbind9.git

fix: usr: Don't synthesize negative responses with pending NSEC

If an NSEC record has not yet been validated and is cached with trust
pending, don't use it to synthesize negative responses.

Closes #5872

Closes #5887

Closes #5977

Merge branch '5977-validate-synth-from-dnssec' into 'main'

See merge request isc-projects/bind9!12281
---

10b8edb27f50bc7da254cbc29a75fba5ecb82cc4