For up-to-date release notes and errata, see
http://www.isc.org/software/bind9/releasenotes
+BIND 9.9.7-P2
+
+ BIND 9.9.7-P1 is a security release addressing the flaw
+ described in CVE-2015-5477.
+
BIND 9.9.7-P1
BIND 9.9.7-P1 is a security release addressing the flaw
<para>
This document summarizes changes since BIND 9.9.7.
</para>
+ <para>
+ BIND 9.9.7-P2 addresses a security issue described in CVE-2015-5477.
+ </para>
<para>
BIND 9.9.7-P1 addresses a security issue described in CVE-2015-4620.
</para>
<sect2 id="relnotes_security">
<title>Security Fixes</title>
<itemizedlist>
+ <listitem>
+ <para>
+ A specially crafted query could trigger a assertion failure
+ message.c.
+ </para>
+ <para>
+ This flaw is disclosed in CVE-2015-5477. [RT #39795]
+ </para>
+ </listitem>
<listitem>
<para>
On servers configured to perform DNSSEC validation an
assertion failure could be triggered on answers from
a specially configured server.
</para>
- <para>
+ <para>
This flaw was discovered by Breno Silveira Soares, and is
disclosed in CVE-2015-4620. [RT #39795]
- </para>
- </listitem>
+ </para>
+ </listitem>
</itemizedlist>
</sect2>
<sect2 id="relnotes_features">
<para>
The BIND 9.9 (Extended Support Version) will be supported until June, 2017.
<ulink url="https://www.isc.org/downloads/software-support-policy/"
- >https://www.isc.org/downloads/software-support-policy/</ulink>
+ >https://www.isc.org/downloads/software-support-policy/</ulink>
</para>
</sect2>
<sect2 id="relnotes_thanks">