From: Evan Hunt <each@isc.org>
Date: Tue, 18 Nov 2014 08:04:42 +0000 (-0800)
Subject: [master] add CVE
X-Git-Tag: v9.11.0a1~1256
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=90fc237a1fdf1680ef254f16b497f90ac759f71b;p=thirdparty%2Fbind9.git

[master] add CVE
---

diff --git a/CHANGES b/CHANGES
index 5f425bef331..ac1bf9ef3a9 100644
--- a/CHANGES
+++ b/CHANGES
@@ -24,15 +24,16 @@
 			named run-time, the previously loaded GeoIP
 			data could remain, potentially causing wrong
 			ACLs to be used or wrong results to be served
-			based on geolocation. [RT #37720]
+			based on geolocation (CVE-2014-8680). [RT #37720]
 
 4002.	[security]	Lookups in GeoIP databases that were not
-			loaded could cause an assertion failure.
-			[RT #37679]
+			loaded could cause an assertion failure
+			(CVE-2014-8680). [RT #37679]
 
 4001.	[security]	The caching of GeoIP lookups did not always
 			handle address families correctly, potentially
-			resulting in an assertion failure. [RT #37672]
+			resulting in an assertion failure (CVE-2014-8680).
+			[RT #37672]
 
 4000.	[bug]		NXDOMAIN redirection incorrectly handled NXRRSET
 			from the redirect zone. [RT #37722]