[9.18] [CVE-2023-5679] Check dns64 + server-stale short timeout (!8922) · Merge requests · ISC Open Source Projects / BIND

Michał Kępień requested to merge 4334-CVE-2023-5679-test-9.18 into bind-9.18 Mar 28, 2024

Check that named correctly returns a synthesized DNS64 answer when the server stale timer triggers for the A lookup. Use a small value for stale-answer-client-timeout (2ms) and delay the A response by 1 second.

As pointed out elsewhere, it makes no sense to merge this test to v9.19 any more, so it will only be merged into v9.18 & v9.16.

Closes #4334 (closed)

[9.18] [CVE-2023-5679] Check dns64 + server-stale short timeout

Merge request reports