]> git.ipfire.org Git - thirdparty/bind9.git/commitdiff
regen v9_11_0_patch
authorTinderbox User <tbox@isc.org>
Fri, 24 Feb 2017 01:37:17 +0000 (01:37 +0000)
committerTinderbox User <tbox@isc.org>
Fri, 24 Feb 2017 01:37:17 +0000 (01:37 +0000)
doc/arm/Bv9ARM.ch09.html
doc/arm/notes.html

index 550757d4b5ee02b4157d8f612ea66cabe496a992..3ad5870a0625e11c2caed8e01fc314e49db7a232 100644 (file)
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         Some chaining (i.e., type CNAME or DNAME) responses to upstream
+         queries could trigger assertion failures. This flaw is disclosed
+         in CVE-2017-3137. [RT #44734]
+       </p></li>
 <li class="listitem"><p>
          <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
          can result in an assertion failure. This flaw is disclosed in
-         CVE-2017-3136.[RT #44653]
+         CVE-2017-3136. [RT #44653]
        </p></li>
 <li class="listitem"><p>
          If a server is configured with a response policy zone (RPZ)
index 9b618599a10d2a7bd5c102e213fe4b381478f03e..4f04aa0c7551f31163e65dbaa72b0384f473d438 100644 (file)
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         Some chaining (i.e., type CNAME or DNAME) responses to upstream
+         queries could trigger assertion failures. This flaw is disclosed
+         in CVE-2017-3137. [RT #44734]
+       </p></li>
 <li class="listitem"><p>
          <span class="command"><strong>dns64</strong></span> with <span class="command"><strong>break-dnssec yes;</strong></span>
          can result in an assertion failure. This flaw is disclosed in
-         CVE-2017-3136.[RT #44653]
+         CVE-2017-3136. [RT #44653]
        </p></li>
 <li class="listitem"><p>
          If a server is configured with a response policy zone (RPZ)