upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-05-28 04:34:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions 4

Add CHANGES and release notes for [GL #4124]

Browse source 
(cherry picked from commit 57c8bdaff5)
This commit is contained in:
Ondřej Surý 2023-08-14 11:20:41 +02:00
parent 57069556eb
commit c63c646019
No known key found for this signature in database
GPG key ID: 2820F37E873DEA41
2 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
CHANGES
View file

@ -1,3 +1,6 @@
6224. [bug] Check the If-Modified-Since value length to prevent
out-of-bounds write. [GL #4124]
6220. [func] Deprecate the 'dialup' and 'heartbeat-interval'
options. [GL #3700]

8
doc/notes/notes-current.rst
View file

@ -37,6 +37,14 @@ Bug Fixes
- None.
- The value of If-Modified-Since header in statistics channel was not checked
for length leading to possible buffer overflow by an authorized user. We
would like to emphasize that statistics channel must be properly setup to
allow access only from authorized users of the system. :gl:`#4124`
This was reported independently by Eric Sesterhenn of X41 D-SEC and Cameron
Whitehead.
Known Issues
~~~~~~~~~~~~