add CVE-2016-2776

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 78ec02d6b109e4ed6b122a5a638433cf2e0f7fd1..72cebb286a77c02dae528b2fb28d680a5e8a8956 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -23,6 +23,10 @@
     <para>
       This document summarizes changes since BIND 9.9.9:
     </para>
+    <para>
+      BIND 9.10.9-P3 addresses the security issue described in
+      CVE-2016-2776.
+    </para>
     <para>
       BIND 9.9.9-P2 addresses the security issue described in
       CVE-2016-2775.
@@ -49,11 +53,18 @@
     <itemizedlist>
       <listitem>
        <para>
-         getrrsetbyname with a non absolute name could trigger an
-         infinite recursion bug in lwresd and named with lwres
-         configured if when combined with a search list entry the
-         resulting name is too long.  This flaw is disclosed in
-         CVE-2016-2775. [RT #42694]
+         It was possible to trigger a assertion when rendering a
+         message using a specially crafted request. This flaw is
+         disclosed in CVE-2016-2776. [RT #43139]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+        getrrsetbyname with a non absolute name could trigger an
+        infinite recursion bug in lwresd and named with lwres
+        configured if when combined with a search list entry the
+        resulting name is too long.  This flaw is disclosed in
+        CVE-2016-2775. [RT #42694]
        </para>
       </listitem>
     </itemizedlist>