regen master

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index 14a088bd2bfb978c91b00321c3d2ddbed66aab3e..d5409fe277ff03a520bd169103b4fad5fd276404 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -83,7 +83,11 @@
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         None.
+         Addresses could be referenced after being freed during resolver
+         processing, causing an assertion failure. The chances of this
+         happening were remote, but the introduction of a delay in
+         resolution increased them. This bug is disclosed in
+         CVE-2017-3145. [RT #46839]
        </p>
       </li></ul></div>
   </div>
@@ -116,7 +120,11 @@
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         None.
+         Attempting to validate improperly unsigned CNAME responses
+         from secure zones could cause a validator loop. This caused
+         a delay in returning SERVFAIL and also increased the chances
+         of encountering the crash bug described in CVE-2017-3145.
+         [RT #46839]
        </p>
       </li></ul></div>
   </div>

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 421bed2dd1fc60fb55de8a144c403c91998722a2..997afd4a50a86026fb08c23ae339aad75c35ca33 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -46,7 +46,11 @@
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         None.
+         Addresses could be referenced after being freed during resolver
+         processing, causing an assertion failure. The chances of this
+         happening were remote, but the introduction of a delay in
+         resolution increased them. This bug is disclosed in
+         CVE-2017-3145. [RT #46839]
        </p>
       </li></ul></div>
   </div>
@@ -79,7 +83,11 @@
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
     <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem">
        <p>
-         None.
+         Attempting to validate improperly unsigned CNAME responses
+         from secure zones could cause a validator loop. This caused
+         a delay in returning SERVFAIL and also increased the chances
+         of encountering the crash bug described in CVE-2017-3145.
+         [RT #46839]
        </p>
       </li></ul></div>
   </div>