From 01ac86f90ba6fb834e2ee94ad90881522ff9e641 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Wed, 14 Feb 2024 14:49:49 +0100 Subject: [PATCH] Retroactively add release note for CVE-2023-50868 A release note for CVE-2023-50868 was not included in BIND 9.19.21, even though that vulnerability was already addressed in that release (by the fix for CVE-2023-50387). Retroactively add a relevant release note for BIND 9.19.21. --- doc/notes/notes-9.19.21.rst | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/doc/notes/notes-9.19.21.rst b/doc/notes/notes-9.19.21.rst index 16f1b7bc3b..f059314598 100644 --- a/doc/notes/notes-9.19.21.rst +++ b/doc/notes/notes-9.19.21.rst @@ -24,6 +24,10 @@ Security Fixes Applied Cybersecurity ATHENE for bringing this vulnerability to our attention. :gl:`#4424` +- Preparing an NSEC3 closest encloser proof could cause excessive CPU + load, leading to a denial-of-service condition. This has been fixed. + :cve:`2023-50868` :gl:`#4459` + - Parsing DNS messages with many different names could cause excessive CPU load. This has been fixed. :cve:`2023-4408`