add CVE-2016-2776

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index f14b69ccf93b078496265c32e6b98ccaf0ef51d3..a90e7b493721487c98a266755f1ea28f47c48bf2 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -23,6 +23,10 @@
     <para>
       This document summarizes changes since BIND 9.10.4:
     </para>
+    <para>
+      BIND 9.10.4-P3 addresses the security issue described in
+      CVE-2016-2776.
+    </para>
     <para>
       BIND 9.10.4-P2 addresses the security issue described in
       CVE-2016-2775.
@@ -50,11 +54,18 @@
     <itemizedlist>
       <listitem>
        <para>
-         getrrsetbyname with a non absolute name could trigger an
-         infinite recursion bug in lwresd and named with lwres
-         configured if when combined with a search list entry the
-         resulting name is too long.  This flaw is disclosed in
-         CVE-2016-2775. [RT #42694]
+         It was possible to trigger a assertion when rendering a
+         message using a specially crafted request. This flaw is
+         disclosed in CVE-2016-2776. [RT #43139]
+       </para>
+      </listitem>
+      <listitem>
+       <para>
+        getrrsetbyname with a non absolute name could trigger an
+        infinite recursion bug in lwresd and named with lwres
+        configured if when combined with a search list entry the
+        resulting name is too long.  This flaw is disclosed in
+        CVE-2016-2775. [RT #42694]
        </para>
       </listitem>
     </itemizedlist>