- Fix CVE-2026-42955, Extra fix for CVE-2026-40622 to also clamp

the TTL of A/AAAA records disallowing a one-time 'ghost domain'
  delegation renewal via glue records. Thanks to Qifan Zhang, Palo
  Alto Networks, for the report.