Bug#581857: order random_1 brokeness

2010-05-16 Thread Florian Weimer
Package: bind9 order random_1 is applied to DO queries and consequently returns data which fails DNSSEC validation. It's also not restricted to types A and , so there's a risk of service degradation/DoS (for example, assume that a downstream cache receives a NS RRset for BIZ which only

Bug#581857: order random_1 brokeness

2010-05-16 Thread LaMont Jones
On Sun, May 16, 2010 at 07:19:23PM +0200, Florian Weimer wrote: order random_1 is applied to DO queries and consequently returns data which fails DNSSEC validation. It's also not restricted to types A and , so there's a risk of service degradation/DoS (for example, assume that a