upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-10 07:59:59 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Reorder release notes

Browse source
This commit is contained in:
Michał Kępień 2026-02-26 21:17:47 +01:00
parent f3be1bf699
commit 205c35b9cd
No known key found for this signature in database
1 changed files with 18 additions and 18 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

36
doc/notes/notes-9.21.19.rst
View file

@ -15,6 +15,24 @@ Notes for BIND 9.21.19
Security Fixes
~~~~~~~~~~~~~~
- Fix a use-after-free error in ``dns_client_resolve()`` triggered by a
DNAME response.
This issue only affected the :iscman:`delv` tool and it has now been
fixed.
ISC would like to thank Vitaly Simonovich for bringing this
vulnerability to our attention. :gl:`#5728`
- Fix a NULL pointer dereference in qp-trie cache code.
When ``RRSIG(rdtype)`` was independently cached before the RDATA for
the ``rdtype`` itself, :iscman:`named` would crash on the subsequent
query for the RDATA itself. This has been fixed.
ISC would like to thank Vitaly Simonovich for bringing this
vulnerability to our attention. :gl:`#5738`
- Immediately remove purged ADB names and entries from the SIEVE list.
Under certain circumstances, the ADB could double-count purged
@ -62,24 +80,6 @@ Bug Fixes
- Fix dnstap logging of forwarded queries. :gl:`#5724`
- Fix a use-after-free error in ``dns_client_resolve()`` triggered by a
DNAME response.
This issue only affected the :iscman:`delv` tool and it has now been
fixed.
ISC would like to thank Vitaly Simonovich for bringing this
vulnerability to our attention. :gl:`#5728`
- Fix a NULL pointer dereference in qp-trie cache code.
When ``RRSIG(rdtype)`` was independently cached before the RDATA for
the ``rdtype`` itself, :iscman:`named` would crash on the subsequent
query for the RDATA itself. This has been fixed.
ISC would like to thank Vitaly Simonovich for bringing this
vulnerability to our attention. :gl:`#5738`
- A stale answer could have been served in case of multiple upstream
failures when following CNAME chains. This has been fixed. :gl:`#5751`