From 3ff66da573a77c8783deca10ec8c6bba07cd85e6 Mon Sep 17 00:00:00 2001 From: Matthias Andree Date: Tue, 2 Jun 2026 20:46:57 +0200 Subject: [PATCH] Fix two typos in v2.93 CHANGELOG --- CHANGELOG | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/CHANGELOG b/CHANGELOG index 4acc376..1999090 100644 --- a/CHANGELOG +++ b/CHANGELOG @@ -1,6 +1,6 @@ version 2.93 Fix a corner-case in DNSSEC validation with wildcards. If we have - a wildcard record *.example.com and recieve a query for + a wildcard record *.example.com and receive a query for a.example.com then that's OK, but we have to check that there isn't an actual a.example.com record. The corner case is when we get a query for *.example.com in that case the non-existence check @@ -19,7 +19,7 @@ version 2.93 (eg rivcoed.org) will still fail. Thanks to Petr Menšík for the bug report. - Fix DNSSEC fail with CNAME replies to DS queries. As CNAME reply + Fix DNSSEC fail with CNAME replies to DS queries. A CNAME reply to a DNSSEC query was confusing the validation logic. It now accepts a signed CNAME reply to a DS query as proof that no DS exists at the domain. This fixes the DS/zone break detection logic.