From 7d5b7192ec0d60605682cdc6bf6d112f768c3109 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Mon, 10 Dec 2018 09:13:05 +1100 Subject: [PATCH] add CHANGES and release note entries --- CHANGES | 3 ++- doc/arm/notes.xml | 9 +++++++++ 2 files changed, 11 insertions(+), 1 deletion(-) diff --git a/CHANGES b/CHANGES index 790d28111d..2f43c993cc 100644 --- a/CHANGES +++ b/CHANGES @@ -182,7 +182,8 @@ 5111. [bug] Occluded DNSKEY records could make it into the delegating NSEC/NSEC3 bitmap. [GL #742] -5110. [placeholder] +5110. [security] Named leaked memory if there were multiple Key Tag + EDNS options present. (CVE-2018-5744) [GL #772] 5109. [cleanup] Remove support for RSAMD5 algorithm. [GL #628] diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index e7ebbd0fb2..79256ea5c1 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -148,6 +148,15 @@ by BIND 9. This flaw is disclosed in CVE-2018-5745. [GL #780] + + + named leaked memory when processing a + request with multiple Key Tag EDNS options present. ISC + would like to thank Toshifumi Sakaguchi for bringing this + to our attention. This flaw is disclosed in CVE-2018-5744. + [GL #772] + +