From: Ondřej Surý <ondrej@isc.org>
Date: Sat, 30 May 2026 06:02:13 +0000 (+0200)
Subject: [9.20] chg: usr: Fix a resolver stall on a CNAME response to a DS query
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=1407f48670dd4007c9cfce1c97ae2d9cf5785ece;p=thirdparty%2Fbind9.git

[9.20] chg: usr: Fix a resolver stall on a CNAME response to a DS query

A validating resolver could stall for about twelve seconds and then return
SERVFAIL when an authoritative server answered a DS query with a CNAME. Such
responses are now rejected promptly, so the query fails fast instead of
hanging.

Closes #5878

Backport of MR !11867

Merge branch 'backport-5878-reject-cname-at-dnssec-types-9.20' into 'bind-9.20'

See merge request isc-projects/bind9!12147
---

1407f48670dd4007c9cfce1c97ae2d9cf5785ece