2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-02 23:55:27 +00:00

regen master

This commit is contained in:
Tinderbox User
2018-02-03 01:11:31 +00:00
parent c34680cf3b
commit 31d0b7e909
2 changed files with 26 additions and 4 deletions

View File

@@ -131,7 +131,17 @@
<div class="section"> <div class="section">
<div class="titlepage"><div><div><h3 class="title"> <div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div> <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"> <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
When answering authoritative queries, <span class="command"><strong>named</strong></span>
does not return the target of a cross-zone CNAME between two
locally served zones; this prevents accidental cache poisoning.
This same restriction was incorrectly applied to recursive
queries as well; this has been fixed. [RT #47078]
</p>
</li>
<li class="listitem">
<p> <p>
Attempting to validate improperly unsigned CNAME responses Attempting to validate improperly unsigned CNAME responses
from secure zones could cause a validator loop. This caused from secure zones could cause a validator loop. This caused
@@ -139,7 +149,8 @@
of encountering the crash bug described in CVE-2017-3145. of encountering the crash bug described in CVE-2017-3145.
[RT #46839] [RT #46839]
</p> </p>
</li></ul></div> </li>
</ul></div>
</div> </div>
<div class="section"> <div class="section">

View File

@@ -93,7 +93,17 @@
<div class="section"> <div class="section">
<div class="titlepage"><div><div><h3 class="title"> <div class="titlepage"><div><div><h3 class="title">
<a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div> <a name="relnotes_bugs"></a>Bug Fixes</h3></div></div></div>
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; "><li class="listitem"> <div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
<li class="listitem">
<p>
When answering authoritative queries, <span class="command"><strong>named</strong></span>
does not return the target of a cross-zone CNAME between two
locally served zones; this prevents accidental cache poisoning.
This same restriction was incorrectly applied to recursive
queries as well; this has been fixed. [RT #47078]
</p>
</li>
<li class="listitem">
<p> <p>
Attempting to validate improperly unsigned CNAME responses Attempting to validate improperly unsigned CNAME responses
from secure zones could cause a validator loop. This caused from secure zones could cause a validator loop. This caused
@@ -101,7 +111,8 @@
of encountering the crash bug described in CVE-2017-3145. of encountering the crash bug described in CVE-2017-3145.
[RT #46839] [RT #46839]
</p> </p>
</li></ul></div> </li>
</ul></div>
</div> </div>
<div class="section"> <div class="section">