From: Matthijs Mekking <matthijs@isc.org>
Date: Fri, 26 Mar 2021 11:25:20 +0000 (+0100)
Subject: Add notes and changes for [#2594]
X-Git-Tag: v9.17.12~16^2~4
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=e44bcc6f53e63b1ed4b56e2af111a826a7dd727d;p=thirdparty%2Fbind9.git

Add notes and changes for [#2594]

Pretty newsworthy.
---

diff --git a/CHANGES b/CHANGES
index 2093d52eb8e..e446dd9a41a 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5610.	[bug]		Prevent a crash which could happen when a lookup
+			triggered by "stale-answer-client-timeout" was attempted
+			right after recursion for a client query finished.
+			[GL #2594]
+
 5609.	[func]		GSSAPI support no longer uses the ISC SPNEGO
 			implementation. [GL #2607]
 
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index c43b733c9dc..1758bbdd479 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -64,4 +64,9 @@ Bug Fixes
   which could cause a large zone transfer to be sent back to the client. The
   default setting for ``tcp-initial-timeout`` was 30 seconds, which meant that
   any TCP connection taking more than 30 seconds was abruptly terminated. This
-  has been fixed [GL #2573].
+  has been fixed. [GL #2573]
+
+- When ``stale-answer-client-timeout`` was set to a positive value and
+  recursion for a client query completed when ``named`` was about to look for
+  a stale answer, an assertion could fail in ``query_respond()``, resulting in
+  a crash. This has been fixed. [GL #2594]