[master] add CVE number

diff --git a/CHANGES b/CHANGES
index ef9599fcda0a5e3680884deefe142f9179deb0ad..02151cf5e6eb648a9bc28b6b1d7bfb44cdd067b0 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -15,7 +15,7 @@
 
 4170.  [security]      An incorrect boundary check in the OPENPGPKEY
                        rdatatype could trigger an assertion failure.
-                       [RT #40286]
+                       (CVE-2015-2986) [RT #40286]
 
 4169.  [test]          Added a 'wire_test -d' option to read input as
                        raw binary data, for use as a fuzzing harness.

diff --git a/README b/README
index a40dc5d15bf7d6f842e3cd308c5490aefa494573..2390e57bae4124dfff85dc83bd5b5d5903596b3c 100644 (file)
--- a/README
+++ b/README
@@ -119,7 +119,7 @@ BIND 9.11.0
 
        This release addresses the security flaws described in
        CVE-2014-3214, CVE-2014-3859, CVE-2014-8500, CVE-2014-8680,
-       CVE-2015-1349, CVE-2015-5477 and CVE-2015-5722.
+       CVE-2015-1349, CVE-2015-5477, CVE-2015-5722, and CVE-2015-5986.
 
 BIND 9.10.0
 

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 94092347969fac558057fe9af58032c496e736c1..a490dc1b34474e4ce71511c63fb5827ebc8ff8fc 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -41,7 +41,8 @@
       <listitem>
        <para>
          An incorrect boundary check in the OPENPGPKEY rdatatype
-         could trigger an assertion failure. [RT #40286]
+         could trigger an assertion failure. This flaw is disclosed
+         in CVE-2015-5986. [RT #40286]
        </para>
       </listitem>
       <listitem>