mir/bind
2
0
Fork 0
mirror of https://gitlab.isc.org/isc-projects/bind9 synced 2025-08-29 13:38:26 +00:00
Code Issues Releases Wiki Activity

Add CHANGES and release note for GL #1996

Browse Source
This commit is contained in:
Ondřej Surý 2020-07-31 09:39:46 +02:00 committed by Michał Kępień
parent 38264b6a4d
commit f2b41e11b4
2 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGES
View File

@ -18,7 +18,9 @@
5479. [placeholder]
5478. [placeholder]
5478. [security] It was possible to trigger an assertion failure by
sending a specially crafted large TCP DNS message.
(CVE-2020-8620) [GL #1996]
5477. [bug] The idle timeout for connected TCP sockets is now
derived from the client query processing timeout

6
doc/notes/notes-current.rst
View File

@ -14,7 +14,11 @@ Notes for BIND 9.17.4
Security Fixes
~~~~~~~~~~~~~~
- None.
- It was possible to trigger an assertion failure by sending a specially
crafted large TCP DNS message. This was disclosed in CVE-2020-8620.
ISC would like to thank Emanuel Almeida of Cisco Systems, Inc. for
bringing this vulnerability to our attention. [GL #1996]
Known Issues
~~~~~~~~~~~~