From: Evan Hunt <each@isc.org>
Date: Thu, 13 Aug 2015 22:30:49 +0000 (-0700)
Subject: [master] add CVE number
X-Git-Tag: v9.11.0a1~583
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=afc3103851e3876db36a9f17193c72b6bddd1b97;p=thirdparty%2Fbind9.git

[master] add CVE number
---

diff --git a/CHANGES b/CHANGES
index ef9599fcda0..02151cf5e6e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -15,7 +15,7 @@
 
 4170.	[security]	An incorrect boundary check in the OPENPGPKEY
 			rdatatype could trigger an assertion failure.
-			[RT #40286]
+			(CVE-2015-2986) [RT #40286]
 
 4169.	[test]		Added a 'wire_test -d' option to read input as
 			raw binary data, for use as a fuzzing harness.
diff --git a/README b/README
index a40dc5d15bf..2390e57bae4 100644
--- a/README
+++ b/README
@@ -119,7 +119,7 @@ BIND 9.11.0
 
 	This release addresses the security flaws described in
 	CVE-2014-3214, CVE-2014-3859, CVE-2014-8500, CVE-2014-8680,
-	CVE-2015-1349, CVE-2015-5477 and CVE-2015-5722.
+	CVE-2015-1349, CVE-2015-5477, CVE-2015-5722, and CVE-2015-5986.
 
 BIND 9.10.0
 
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 94092347969..a490dc1b344 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -41,7 +41,8 @@
       <listitem>
 	<para>
 	  An incorrect boundary check in the OPENPGPKEY rdatatype
-	  could trigger an assertion failure. [RT #40286]
+	  could trigger an assertion failure. This flaw is disclosed
+	  in CVE-2015-5986. [RT #40286]
 	</para>
       </listitem>
       <listitem>