regen v9_9_8_patch

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index a1060be25fa967c61a7981b46be174b430751100..9951f3ce1965616a1357152202ef02b781ae4a97 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -68,7 +68,8 @@
       This document summarizes changes since BIND 9.9.8:
     </p>
 <p>
-      BIND 9.9.8-P4 addresses the security issue described in CVE-2016-1285.
+      BIND 9.9.8-P4 addresses the security issues described in
+      CVE-2016-1285 and CVE-2016-1286.
     </p>
 <p>
       BIND 9.9.8-P3 addresses the security issue described in CVE-2015-8704.
@@ -98,12 +99,22 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul type="disc">
+<li><p>
+         The resolver could abort with an assertion failure due to
+         improper DNAME handling when parsing fetch reply
+         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
+       </p></li>
+<li><p>
+         Malformed control messages can trigger assertions in named
+         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
+         #41666]
+       </p></li>
 <li><p>
          Specific APL data could trigger an INSIST.  This flaw
          is disclosed in CVE-2015-8704. [RT #41396]
        </p></li>
 <li><p>
-         Named is potentially vulnerable to the OpenSSL vulnerabilty
+         Named is potentially vulnerable to the OpenSSL vulnerability
          described in CVE-2015-3193.
        </p></li>
 <li><p>
@@ -118,16 +129,6 @@
          failure if a socket error occurred while performing a
          lookup.  This flaw is disclosed in CVE-2015-8461. [RT#40945]
        </p></li>
-<li><p>
-         Malformed control messages can trigger assertions in named
-         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
-         #41666]
-       </p></li>
-<li><p>
-         The resolver could abort with an assertion failure due to
-         improper DNAME handling when parsing fetch reply
-         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
-       </p></li>
 </ul></div>
 </div>
 <div class="sect2" lang="en">

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 7bef168ac007524ef450174db3fa35db1cf41386..294bc406fb5584f11063925237b759945aa405a0 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -29,7 +29,8 @@
       This document summarizes changes since BIND 9.9.8:
     </p>
 <p>
-      BIND 9.9.8-P4 addresses the security issue described in CVE-2016-1285.
+      BIND 9.9.8-P4 addresses the security issues described in
+      CVE-2016-1285 and CVE-2016-1286.
     </p>
 <p>
       BIND 9.9.8-P3 addresses the security issue described in CVE-2015-8704.
@@ -59,12 +60,22 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul type="disc">
+<li><p>
+         The resolver could abort with an assertion failure due to
+         improper DNAME handling when parsing fetch reply
+         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
+       </p></li>
+<li><p>
+         Malformed control messages can trigger assertions in named
+         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
+         #41666]
+       </p></li>
 <li><p>
          Specific APL data could trigger an INSIST.  This flaw
          is disclosed in CVE-2015-8704. [RT #41396]
        </p></li>
 <li><p>
-         Named is potentially vulnerable to the OpenSSL vulnerabilty
+         Named is potentially vulnerable to the OpenSSL vulnerability
          described in CVE-2015-3193.
        </p></li>
 <li><p>
@@ -79,16 +90,6 @@
          failure if a socket error occurred while performing a
          lookup.  This flaw is disclosed in CVE-2015-8461. [RT#40945]
        </p></li>
-<li><p>
-         Malformed control messages can trigger assertions in named
-         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
-         #41666]
-       </p></li>
-<li><p>
-         The resolver could abort with an assertion failure due to
-         improper DNAME handling when parsing fetch reply
-         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
-       </p></li>
 </ul></div>
 </div>
 <div class="sect2" lang="en">