From: Michał Kępień <michal@isc.org>
Date: Thu, 3 Jul 2025 12:17:14 +0000 (+0200)
Subject: [9.20] [CVE-2025-40777] sec: usr: Fix a possible assertion failure when using the... 
X-Git-Tag: v9.20.11~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=055a592fd97ce6c94db7f9718da2873524262e16;p=thirdparty%2Fbind9.git

[9.20] [CVE-2025-40777] sec: usr: Fix a possible assertion failure when using the 'stale-answer-client-timeout 0' option

In specific circumstances the :iscman:`named` resolver process could
terminate unexpectedly when stale answers were enabled and the
``stale-answer-client-timeout 0`` configuration option was used.
This has been fixed.

Backport of !808

See isc-projects/bind9#5372

Merge branch 'backport-5372-security-serve-stale-crash-on-insist-unreachable-9.20' into 'v9.20.11-release'

See merge request isc-private/bind9!815
---

055a592fd97ce6c94db7f9718da2873524262e16