mirror of
https://gitlab.isc.org/isc-projects/bind9
synced 2025-09-01 06:55:30 +00:00
regen master
This commit is contained in:
@@ -113,9 +113,41 @@
|
|||||||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||||||
<li class="listitem">
|
<li class="listitem">
|
||||||
<p>
|
<p>
|
||||||
Named incorrectly tried to cache TKEY records which could
|
A coding error in the <code class="option">nxdomain-redirect</code>
|
||||||
trigger a assertion failure when there was a class mismatch.
|
feature could lead to an assertion failure if the redirection
|
||||||
This flaw is disclosed in CVE-2016-9131. [RT #43522]
|
namespace was served from a local authoritative data source
|
||||||
|
such as a local zone or a DLZ instead of via recursive
|
||||||
|
lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> could mishandle authority sections
|
||||||
|
with missing RRSIGs, triggering an assertion failure. This
|
||||||
|
flaw is disclosed in CVE-2016-9444. [RT #43632]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> mishandled some responses where
|
||||||
|
covering RRSIG records were returned without the requested
|
||||||
|
data, resulting in an assertion failure. This flaw is
|
||||||
|
disclosed in CVE-2016-9147. [RT #43548]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
|
||||||
|
records which could trigger an assertion failure when there was
|
||||||
|
a class mismatch. This flaw is disclosed in CVE-2016-9131.
|
||||||
|
[RT #43522]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
It was possible to trigger assertions when processing
|
||||||
|
responses containing answers of type DNAME. This flaw is
|
||||||
|
disclosed in CVE-2016-8864. [RT #43465]
|
||||||
</p>
|
</p>
|
||||||
</li>
|
</li>
|
||||||
<li class="listitem">
|
<li class="listitem">
|
||||||
|
@@ -76,9 +76,41 @@
|
|||||||
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
<div class="itemizedlist"><ul class="itemizedlist" style="list-style-type: disc; ">
|
||||||
<li class="listitem">
|
<li class="listitem">
|
||||||
<p>
|
<p>
|
||||||
Named incorrectly tried to cache TKEY records which could
|
A coding error in the <code class="option">nxdomain-redirect</code>
|
||||||
trigger a assertion failure when there was a class mismatch.
|
feature could lead to an assertion failure if the redirection
|
||||||
This flaw is disclosed in CVE-2016-9131. [RT #43522]
|
namespace was served from a local authoritative data source
|
||||||
|
such as a local zone or a DLZ instead of via recursive
|
||||||
|
lookup. This flaw is disclosed in CVE-2016-9778. [RT #43837]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> could mishandle authority sections
|
||||||
|
with missing RRSIGs, triggering an assertion failure. This
|
||||||
|
flaw is disclosed in CVE-2016-9444. [RT #43632]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> mishandled some responses where
|
||||||
|
covering RRSIG records were returned without the requested
|
||||||
|
data, resulting in an assertion failure. This flaw is
|
||||||
|
disclosed in CVE-2016-9147. [RT #43548]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
<span class="command"><strong>named</strong></span> incorrectly tried to cache TKEY
|
||||||
|
records which could trigger an assertion failure when there was
|
||||||
|
a class mismatch. This flaw is disclosed in CVE-2016-9131.
|
||||||
|
[RT #43522]
|
||||||
|
</p>
|
||||||
|
</li>
|
||||||
|
<li class="listitem">
|
||||||
|
<p>
|
||||||
|
It was possible to trigger assertions when processing
|
||||||
|
responses containing answers of type DNAME. This flaw is
|
||||||
|
disclosed in CVE-2016-8864. [RT #43465]
|
||||||
</p>
|
</p>
|
||||||
</li>
|
</li>
|
||||||
<li class="listitem">
|
<li class="listitem">
|
||||||
|
Reference in New Issue
Block a user