From: Mark Andrews <marka@isc.org>
Date: Wed, 1 Jul 2026 08:19:36 +0000 (+1000)
Subject: fix: nil: Add missing dumpnode call in dnssec-signzone
X-Git-Tag: v9.21.24~9
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=cb0a00c83774abe6dfd7845f7d1b5140c3daf0e9;p=thirdparty%2Fbind9.git

fix: nil: Add missing dumpnode call in dnssec-signzone

When the out of zone name was skipped, to prevent it being signed,
dumpnode was not being called to preserve the contents of the node.

This call was missing from "[CVE-2026-11721] sec: usr: Invalid
signed wildcard records were being accepted"

Merge branch '5871-confidential-followup' into 'security-main'

See merge request isc-private/bind9!1081
---

cb0a00c83774abe6dfd7845f7d1b5140c3daf0e9