Bug#1114787: systemd-resolved fails to resolve queries with DNSOverTLS

[disaderp at pm.me]

Package: systemd-resolved
X-Debbugs-Cc: disaderp at pm.me
Version: 257.8-1~deb13u1
Severity: important

Dear Maintainer,

After upgrade of systemd-resolved:amd64 from 257.7-1 to 257.8-1~deb13u1, DNS resolver stops working after a few minutes.
To restore DNS name resolution it is required to restart systemd-resolved.
This has been already reported to systemd: https://github.com/systemd/systemd/issues/38509.

nslookup reports: ;; communications error to 127.0.0.53#53: timed out

# resolvectl
Global
         Protocols: +LLMNR -mDNS +DNSOverTLS DNSSEC=no/unsupported
  resolv.conf mode: stub
Current DNS Server: REDACTED
       DNS Servers: REDACTED



-- System Information:
Debian Release: 13.1
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable-security'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 6.12.43+deb13-amd64 (SMP w/2 CPU threads; PREEMPT)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8), LANGUAGE=en_US:en
Shell: /bin/sh linked to /usr/bin/dash
Init: systemd (via /run/systemd/system)
LSM: AppArmor: enabled

Versions of packages systemd-resolved depends on:
ii  dbus [default-dbus-system-bus]  1.16.2-2
ii  libc6                           2.41-12
ii  libssl3t64                      3.5.1-1
ii  libsystemd-shared               257.8-1~deb13u1
ii  systemd                         257.8-1~deb13u1

Versions of packages systemd-resolved recommends:
ii  libidn2-0          2.3.8-2
ii  libnss-myhostname  257.8-1~deb13u1
ii  libnss-resolve     257.8-1~deb13u1

Versions of packages systemd-resolved suggests:
pn  polkitd  <none>

-- Configuration Files:
/etc/systemd/resolved.conf changed [not included]

-- no debconf information