From aa4e2a9e693a1b87c72d850cd88f1b74574b7f46 Mon Sep 17 00:00:00 2001 From: "W.C.A. Wijngaards" Date: Mon, 23 Feb 2026 12:45:14 +0100 Subject: [PATCH] - Fix to have cachedb not return expired bogus data as non-bogus. --- cachedb/cachedb.c | 4 +++- doc/Changelog | 3 +++ 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/cachedb/cachedb.c b/cachedb/cachedb.c index b45c0a3ea..226669fcd 100644 --- a/cachedb/cachedb.c +++ b/cachedb/cachedb.c @@ -754,8 +754,10 @@ cachedb_intcache_store(struct module_qstate* qstate, int msg_expired, "(original ttl: %d)", (int)original_ttl); /* The expired entry does not get checked by the validator * and we need a validation value for it. */ + /* By setting this to unchecked, bogus data is not returned + * as non-bogus. */ if(qstate->env->cfg->cachedb_check_when_serve_expired) - qstate->return_msg->rep->security = sec_status_insecure; + qstate->return_msg->rep->security = sec_status_unchecked; } (void)dns_cache_store(qstate->env, &qstate->qinfo, qstate->return_msg->rep, 0, qstate->prefetch_leeway, 0, diff --git a/doc/Changelog b/doc/Changelog index 6ac6a1038..84e1f05cf 100644 --- a/doc/Changelog +++ b/doc/Changelog @@ -1,3 +1,6 @@ +23 February 2026: Wouter + - Fix to have cachedb not return expired bogus data as non-bogus. + 17 February 2026: Wouter - Fix to remove unused conditional from cookie timestamp at worker env.