2
0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-09-01 15:05:23 +00:00

add CVE-2015-5477

This commit is contained in:
Mark Andrews
2015-07-15 07:51:06 +10:00
parent 13c55f6a60
commit c5eb9add52
2 changed files with 20 additions and 10 deletions

4
README
View File

@@ -103,8 +103,8 @@ BIND 9.11.0
to be added. This can be disabled with "check-names no". to be added. This can be disabled with "check-names no".
This release addresses the security flaws described in This release addresses the security flaws described in
CVE-2014-3214, CVE-2014-3859, CVE-2014-8500, CVE-2014-8680 and CVE-2014-3214, CVE-2014-3859, CVE-2014-8500, CVE-2014-8680,
CVE-2015-1349. CVE-2015-1349 and CVE-2015-5477.
BIND 9.10.0 BIND 9.10.0

View File

@@ -38,6 +38,16 @@
<sect2 id="relnotes_security"> <sect2 id="relnotes_security">
<title>Security Fixes</title> <title>Security Fixes</title>
<itemizedlist> <itemizedlist>
<listitem>
<para>
A specially crafted query could trigger an assertion failure
in message.c.
</para>
<para>
This flaw was discovered by Jonathan Foote, and is disclosed
in CVE-2015-5477. [RT #39795]
</para>
</listitem>
<listitem> <listitem>
<para> <para>
On servers configured to perform DNSSEC validation, an On servers configured to perform DNSSEC validation, an