From: Tinderbox User <tbox@isc.org>
Date: Fri, 24 Feb 2017 01:29:58 +0000 (+0000)
Subject: regen v9_9_9_patch
X-Git-Tag: v9.9.9-P8~9
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fca85ce291843093de6979299ef236cba3198334;p=thirdparty%2Fbind9.git

regen v9_9_9_patch
---

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index c66334a99db..d6310169af3 100644
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -143,10 +143,15 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+	  Some chaining (i.e., type CNAME or DNAME) responses to upstream
+	  queries could trigger assertion failures. This flaw is disclosed
+	  in CVE-2017-3137. [RT #44734]
+	</p></li>
 <li class="listitem"><p>
 	  <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
 	  can result in an assertion failure. This flaw is disclosed in
-	  CVE-2017-3136.[RT #44653]
+	  CVE-2017-3136. [RT #44653]
 	</p></li>
 <li class="listitem"><p>
 	  If a server is configured with a response policy zone (RPZ)
diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index a62b96ba02a..70dc4b1ea3c 100644
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -104,10 +104,15 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+	  Some chaining (i.e., type CNAME or DNAME) responses to upstream
+	  queries could trigger assertion failures. This flaw is disclosed
+	  in CVE-2017-3137. [RT #44734]
+	</p></li>
 <li class="listitem"><p>
 	  <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
 	  can result in an assertion failure. This flaw is disclosed in
-	  CVE-2017-3136.[RT #44653]
+	  CVE-2017-3136. [RT #44653]
 	</p></li>
 <li class="listitem"><p>
 	  If a server is configured with a response policy zone (RPZ)