rustsec/advisory-db
1
0
Fork 0
mirror of https://github.com/rustsec/advisory-db.git synced 2026-05-15 16:41:31 -04:00
Code Issues Packages Projects Releases Wiki Activity

hickory-proto: adjust RUSTSEC-2026-0118 versions

Browse Source
This commit is contained in:
Daniel McCarney
2026-05-01 13:07:59 -04:00
committed by Dirkjan Ochtman
parent d6ba1f7070
commit 20377f44ed
1 changed files with 4 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
crates/hickory-proto/RUSTSEC-2026-0118.md
View File

@@ -10,7 +10,7 @@ license = "CC-BY-4.0"
[versions]
patched = []
unaffected = ["< 0.25.0-alpha.3"]
unaffected = ["< 0.25.0-alpha.3", ">= 0.26.0-beta.1"]
```
# NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses
@@ -43,5 +43,6 @@ can return such a response can therefore crash a debug-built validator or
exhaust memory on a release-built one.
The affected code was migrated from `hickory-proto` to `hickory-net` as part of
the 0.26.0 release. We recommend all affected users update to `hickory-net`
0.26.1 for the fix.
the 0.26.0 release. The `hickory-proto` 0.26.x release no longer offers
`DnssecDnsHandle` and so we recommend all affected users update to `hickory-net`
0.26.1 when the implementation of that type is required.