From 20377f44edabca7c4a765ccdcd05935331b6191f Mon Sep 17 00:00:00 2001 From: Daniel McCarney Date: Fri, 1 May 2026 13:07:59 -0400 Subject: [PATCH] hickory-proto: adjust RUSTSEC-2026-0118 versions --- crates/hickory-proto/RUSTSEC-2026-0118.md | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/crates/hickory-proto/RUSTSEC-2026-0118.md b/crates/hickory-proto/RUSTSEC-2026-0118.md index 80435727b..058c6b30e 100644 --- a/crates/hickory-proto/RUSTSEC-2026-0118.md +++ b/crates/hickory-proto/RUSTSEC-2026-0118.md @@ -10,7 +10,7 @@ license = "CC-BY-4.0" [versions] patched = [] -unaffected = ["< 0.25.0-alpha.3"] +unaffected = ["< 0.25.0-alpha.3", ">= 0.26.0-beta.1"] ``` # NSEC3 closest-encloser proof validation enters unbounded loop on cross-zone responses @@ -43,5 +43,6 @@ can return such a response can therefore crash a debug-built validator or exhaust memory on a release-built one. The affected code was migrated from `hickory-proto` to `hickory-net` as part of -the 0.26.0 release. We recommend all affected users update to `hickory-net` -0.26.1 for the fix. +the 0.26.0 release. The `hickory-proto` 0.26.x release no longer offers +`DnssecDnsHandle` and so we recommend all affected users update to `hickory-net` +0.26.1 when the implementation of that type is required.