Bug#1053482: systemd-resolved: resolved can intermittingly fail AF_UNSPEC queries to CNAMEd domains

[Michael Biebl]

Am 05.10.23 um 02:18 schrieb benjamin at locrian.net:
> Package: systemd-resolved
> Version: 252.12-1~deb12u1
> Severity: important
> 
> Dear Maintainer,
> 
> When systemd-resolved simultaneously does A and AAAA queries, it fails if one of the queries returns a CNAME with a zero ttl and the other query returns a CNAME with a nonzero ttl. This happens in practice with several DNS providers. A fix for the problem was recently merged upstream at https://github.com/systemd/systemd/commit/8ec951e8d5cdd3ad632b1cbd8bcbe21d68b17512. See that commit for further details about the issue.
> 
> Please consider backporting this fix to bookworm.

Please ask for a backport to the v252-stable branch upstream.

Regards,
Michael

-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP_signature.asc
Type: application/pgp-signature
Size: 840 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-systemd-maintainers/attachments/20231005/910c2f65/attachment.sig>