For up-to-date release notes and errata, see
http://www.isc.org/software/bind9/releasenotes
+BIND 9.9.8-P2
+
+ BIND 9.9.8-P2 is a security release addressing the flaws
+ described in CVE-2015-3193 (OpenSSL) and CVE-2015-8461.
+
BIND 9.9.8-P1
BIND 9.9.8-P1 is a security release addressing the flaw
This document summarizes changes since BIND 9.9.8:
</para>
<para>
- BIND 9.9.8-P1 addresses a security issue described in CVE-2015-8000.
+ BIND 9.9.8-P2 addresses security issues described in CVE-2015-3193
+ (OpenSSL), CVE-2015-8000 and CVE-2015-8461.
</para>
</sect2>
<sect2 id="relnotes_download">
<itemizedlist>
<listitem>
<para>
- Insufficient testing when parsing a message allowed
- records with an incorrect class to be be accepted,
- triggering a REQUIRE failure when those records
- were subsequently cached. This flaw is disclosed
- in CVE-2015-8000. [RT #40987]
+ Named is potentially vulnerable to the OpenSSL vulnerabilty
+ described in CVE-2015-3193.
</para>
</listitem>
<listitem>
lookup. This flaw is disclosed in CVE-2015-8461. [RT#40945]
</para>
</listitem>
+ <listitem>
+ <para>
+ Insufficient testing when parsing a message allowed
+ records with an incorrect class to be be accepted,
+ triggering a REQUIRE failure when those records
+ were subsequently cached. This flaw is disclosed
+ in CVE-2015-8000. [RT #40987]
+ </para>
+ </listitem>
</itemizedlist>
</sect2>
<sect2 id="relnotes_features">