-3538. [test] Running "make test" now requires loopback interfaces to be
- set up. [RT #32452]
+ --- 9.9.3rc1 released ---
+
+3538. [test] Running "make test" now requires loopback interfaces
+ to be set up. [RT #32452]
3537. [tuning] Slave zones, when updated, now send NOTIFY messages
to peers before being dumped to disk rather than
terse, and none. "yes" and "no" are retained as
synonyms for full and terse, respectively. [RT #29165]
-3500. [port] Support NAPTR regular expression validation on
- all platforms. [RT #32688]
+3500. [security] Support NAPTR regular expression validation on
+ all platforms without using libregex, which
+ can be vulnerable to memory exhaustion attack
+ (CVE-2013-2266). [RT #32688]
3499. [doc] Corrected ARM documentation of built-in zones.
[RT #32694]
BIND 9.9.3
BIND 9.9.3 is a maintenance release and patches the security
- flaws described in CVE-2012-5688 and CVE-2012-5689.
+ flaws described in CVE-2012-5688, CVE-2012-5689 and CVE-2013-2266.
BIND 9.9.2