From: Ondřej Surý <ondrej@isc.org>
Date: Fri, 29 May 2026 20:34:46 +0000 (+0200)
Subject: chg: usr: Fix a resolver stall on a CNAME response to a DS query
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=ed3a16bea8b0d4222ef828f11304a6ae0d86c694;p=thirdparty%2Fbind9.git

chg: usr: Fix a resolver stall on a CNAME response to a DS query

A validating resolver could stall for about twelve seconds and then return
SERVFAIL when an authoritative server answered a DS query with a CNAME. Such
responses are now rejected promptly, so the query fails fast instead of
hanging.

Closes #5878

Merge branch '5878-reject-cname-at-dnssec-types' into 'main'

See merge request isc-projects/bind9!11867
---

ed3a16bea8b0d4222ef828f11304a6ae0d86c694