From: Andoni Duarte <andoni@isc.org>
Date: Thu, 3 Jul 2025 10:52:28 +0000 (+0000)
Subject: [CVE-2025-40777] sec: usr: Fix a possible assertion failure when using the 'stale... 
X-Git-Tag: v9.21.10~2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=7fafa0e48f84e90cb14e2b19cfc20b544d21e1de;p=thirdparty%2Fbind9.git

[CVE-2025-40777] sec: usr: Fix a possible assertion failure when using the 'stale-answer-client-timeout 0' option

In specific circumstances the :iscman:`named` resolver process could
terminate unexpectedly when stale answers were enabled and the
``stale-answer-client-timeout 0`` configuration option was used.
This has been fixed.

See isc-projects/bind9#5372

Merge branch '5372-security-serve-stale-crash-on-insist-unreachable' into 'v9.21.10-release'

See merge request isc-private/bind9!808
---

7fafa0e48f84e90cb14e2b19cfc20b544d21e1de