From 576285226f426e43103bbef88c9d0dd65ea255d0 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Micha=C5=82=20K=C4=99pie=C5=84?= Date: Thu, 26 Feb 2026 21:29:38 +0100 Subject: [PATCH] Reorder release notes --- doc/notes/notes-9.20.20.rst | 33 ++++++++++++++++++--------------- 1 file changed, 18 insertions(+), 15 deletions(-) diff --git a/doc/notes/notes-9.20.20.rst b/doc/notes/notes-9.20.20.rst index 616ec6b6fe..9803fb8d0b 100644 --- a/doc/notes/notes-9.20.20.rst +++ b/doc/notes/notes-9.20.20.rst @@ -12,6 +12,18 @@ Notes for BIND 9.20.20 ---------------------- +Security Fixes +~~~~~~~~~~~~~~ + +- Fix a use-after-free error in ``dns_client_resolve()`` triggered by a + DNAME response. + + This issue only affected the :iscman:`delv` tool and it has now been + fixed. + + ISC would like to thank Vitaly Simonovich for bringing this + vulnerability to our attention. :gl:`#5728` + Feature Changes ~~~~~~~~~~~~~~~ @@ -30,6 +42,12 @@ Feature Changes Bug Fixes ~~~~~~~~~ +- Fix an assertion failure triggered by non-minimal IXFRs. + + Processing an IXFR that included an RRset whose contents were not + changed by the transfer triggered an assertion failure. This has been + fixed. :gl:`#5759` + - Fix a crash when retrying a NOTIFY over TCP. Furthermore, do not attempt to retry over TCP at all if the source @@ -51,15 +69,6 @@ Bug Fixes - Fix dnstap logging of forwarded queries. :gl:`#5724` -- Fix a use-after-free error in ``dns_client_resolve()`` triggered by a - DNAME response. - - This issue only affected the :iscman:`delv` tool and it has now been - fixed. - - ISC would like to thank Vitaly Simonovich for bringing this - vulnerability to our attention. :gl:`#5728` - - A stale answer could have been served in case of multiple upstream failures when following CNAME chains. This has been fixed. :gl:`#5751` @@ -79,9 +88,3 @@ Bug Fixes the import function might overflow. This could lead to a memory corruption on the stack and ultimately a server crash. This has been fixed. :gl:`#5758` - -- Fix an assertion failure triggered by non-minimal IXFRs. - - Processing an IXFR that included an RRset whose contents were not - changed by the transfer triggered an assertion failure. This has been - fixed. :gl:`#5759`