upstream/bind9
1
0
Fork 0
mirror of https://github.com/isc-projects/bind9.git synced 2026-06-13 01:50:00 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

add CVE-2017-3136 note

Browse source
This commit is contained in:
Mark Andrews 2017-02-15 12:44:12 +11:00
parent 3fd94cacfe
commit d77eadc261
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
doc/arm/notes.xml
View file

@ -64,6 +64,13 @@
<section xml:id="relnotes_security"><info><title>Security Fixes</title></info>
<itemizedlist>
<listitem>
<para>
<command>dns64</command> with <command>break-dnssec yes;</command>
can result in an assertion failure. This flaw is disclosed in
CVE-2017-3136.[RT #44653]
</para>
</listitem>
<listitem>
<para>
If a server is configured with a response policy zone (RPZ)