regen v9_11_0_patch

diff --git a/doc/arm/Bv9ARM.ch09.html b/doc/arm/Bv9ARM.ch09.html
index fe5d55696b4d827fade09eb2c63ce10038cc2a5e..ab0bf4df92e15767a4d91d72c4f1980131beed1a 100644 (file)
--- a/doc/arm/Bv9ARM.ch09.html
+++ b/doc/arm/Bv9ARM.ch09.html
@@ -83,6 +83,13 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         If a server is configured with a response policy zone (RPZ)
+         that rewrites an answer with local data, and is also configured
+         for DNS64 address mapping, a NULL pointer can be read
+         triggering a server crash.  This flaw is disclosed in
+         CVE-2017-3135. [RT #44434]
+       </p></li>
 <li class="listitem"><p>
          A coding error in the <code class="option">nxdomain-redirect</code>
          feature could lead to an assertion failure if the redirection
@@ -91,24 +98,26 @@
          lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
        </p></li>
 <li class="listitem"><p>
-         Named could mishandle authority sections that were missing
-         RRSIGs triggering an assertion failure.  This flaw is
-         disclosed in CVE-2016-9444. [RT # 43632]
+         <span class="command"><strong>named</strong></span> could mishandle authority sections
+         with missing RRSIGs, triggering an assertion failure. This
+         flaw is disclosed in CVE-2016-9444. [RT #43632]
        </p></li>
 <li class="listitem"><p>
-         Named mishandled some responses where covering RRSIG
-         records are returned without the requested data
-         resulting in a assertion failure. This flaw is disclosed in
-         CVE-2016-9147. [RT #43548]
+         <span class="command"><strong>named</strong></span> mishandled some responses where
+         covering RRSIG records were returned without the requested
+         data, resulting in an assertion failure. This flaw is
+         disclosed in CVE-2016-9147. [RT #43548]
        </p></li>
 <li class="listitem"><p>
-         Named incorrectly tried to cache TKEY records which could
-         trigger a assertion failure when there was a class mismatch.
-         This flaw is disclosed in CVE-2016-9131.  [RT #43522]
+         <span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
+         records which could trigger an assertion failure when there was
+         a class mismatch. This flaw is disclosed in CVE-2016-9131.
+         [RT #43522]
        </p></li>
 <li class="listitem"><p>
          It was possible to trigger assertions when processing
-         a response. This flaw is disclosed in CVE-2016-8864. [RT #43465]
+         responses containing answers of type DNAME. This flaw is
+         disclosed in CVE-2016-8864. [RT #43465]
        </p></li>
 </ul></div>
 </div>
@@ -137,7 +146,10 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
-         None.
+         A synthesized CNAME record appearing in a response before the
+         associated DNAME could be cached, when it should not have been.
+         This was a regression introduced while addressing CVE-2016-8864.
+         [RT #44318]
        </p></li></ul></div>
 </div>
 <div class="section">

diff --git a/doc/arm/notes.html b/doc/arm/notes.html
index 7ac107a23a5a2474f2ab0592eddf8ac9f58fa7d4..a433f178949a28f3baa83956b6b44e72fc7efbee 100644 (file)
--- a/doc/arm/notes.html
+++ b/doc/arm/notes.html
@@ -44,6 +44,13 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_security"></a>Security Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
+<li class="listitem"><p>
+         If a server is configured with a response policy zone (RPZ)
+         that rewrites an answer with local data, and is also configured
+         for DNS64 address mapping, a NULL pointer can be read
+         triggering a server crash.  This flaw is disclosed in
+         CVE-2017-3135. [RT #44434]
+       </p></li>
 <li class="listitem"><p>
          A coding error in the <code class="option">nxdomain-redirect</code>
          feature could lead to an assertion failure if the redirection
@@ -52,24 +59,26 @@
          lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
        </p></li>
 <li class="listitem"><p>
-         Named could mishandle authority sections that were missing
-         RRSIGs triggering an assertion failure.  This flaw is
-         disclosed in CVE-2016-9444. [RT # 43632]
+         <span class="command"><strong>named</strong></span> could mishandle authority sections
+         with missing RRSIGs, triggering an assertion failure. This
+         flaw is disclosed in CVE-2016-9444. [RT #43632]
        </p></li>
 <li class="listitem"><p>
-         Named mishandled some responses where covering RRSIG
-         records are returned without the requested data
-         resulting in a assertion failure. This flaw is disclosed in
-         CVE-2016-9147. [RT #43548]
+         <span class="command"><strong>named</strong></span> mishandled some responses where
+         covering RRSIG records were returned without the requested
+         data, resulting in an assertion failure. This flaw is
+         disclosed in CVE-2016-9147. [RT #43548]
        </p></li>
 <li class="listitem"><p>
-         Named incorrectly tried to cache TKEY records which could
-         trigger a assertion failure when there was a class mismatch.
-         This flaw is disclosed in CVE-2016-9131.  [RT #43522]
+         <span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
+         records which could trigger an assertion failure when there was
+         a class mismatch. This flaw is disclosed in CVE-2016-9131.
+         [RT #43522]
        </p></li>
 <li class="listitem"><p>
          It was possible to trigger assertions when processing
-         a response. This flaw is disclosed in CVE-2016-8864. [RT #43465]
+         responses containing answers of type DNAME. This flaw is
+         disclosed in CVE-2016-8864. [RT #43465]
        </p></li>
 </ul></div>
 </div>
@@ -98,7 +107,10 @@
 <div class="titlepage"><div><div><h3 class="title">
 <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
 <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"><p>
-         None.
+         A synthesized CNAME record appearing in a response before the
+         associated DNAME could be cached, when it should not have been.
+         This was a regression introduced while addressing CVE-2016-8864.
+         [RT #44318]
        </p></li></ul></div>
 </div>
 <div class="section">