add CVE-2017-3138

(cherry picked from commit fe1ad70e510d2327f9decf5096915becbc2c95c0)

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 248a9310b3c27563d897b8ca5cf51dbd2e6cdabd..289beeda8207f03b72953d5e7183b5438a48efca 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -71,6 +71,12 @@
 
   <section xml:id="relnotes_security"><info><title>Security Fixes</title></info>
     <itemizedlist>
+      <listitem>
+       <para>
+         'rndc ""' could trigger a assertion failure in named. This flaw
+         is disclosed in (CVE-2017-3138). [RT #44924]
+       </para>
+      </listitem>
       <listitem>
        <para>
          Some chaining (i.e., type CNAME or DNAME) responses to upstream