diff --git a/doc/arm/changelog.rst b/doc/arm/changelog.rst index 9e9c3ec534..16e059b278 100644 --- a/doc/arm/changelog.rst +++ b/doc/arm/changelog.rst @@ -18,6 +18,7 @@ Changelog development. Regular users should refer to :ref:`Release Notes ` for changes relevant to them. +.. include:: ../changelog/changelog-9.18.46.rst .. include:: ../changelog/changelog-9.18.45.rst .. include:: ../changelog/changelog-9.18.44.rst .. include:: ../changelog/changelog-9.18.43.rst diff --git a/doc/changelog/changelog-9.18.46.rst b/doc/changelog/changelog-9.18.46.rst new file mode 100644 index 0000000000..f212004ab9 --- /dev/null +++ b/doc/changelog/changelog-9.18.46.rst @@ -0,0 +1,35 @@ +.. Copyright (C) Internet Systems Consortium, Inc. ("ISC") +.. +.. SPDX-License-Identifier: MPL-2.0 +.. +.. This Source Code Form is subject to the terms of the Mozilla Public +.. License, v. 2.0. If a copy of the MPL was not distributed with this +.. file, you can obtain one at https://mozilla.org/MPL/2.0/. +.. +.. See the COPYRIGHT file distributed with this work for additional +.. information regarding copyright ownership. + +BIND 9.18.46 +------------ + +Feature Changes +~~~~~~~~~~~~~~~ + +- Invalid NSEC3 can cause OOB read of the isdelegation() stack. + ``97fd0c56e48`` + + When .next_length is longer than NSEC3_MAX_HASH_LENGTH, it causes a + harmless out-of-bound read of the isdelegation() stack. This has been + fixed. :gl:`#5749` :gl:`!11595` + +Bug Fixes +~~~~~~~~~ + +- Clear serve-stale flags when following the CNAME chains. + ``7733cb4580e`` + + A stale answer could have been served in case of multiple upstream + failures when following the CNAME chains. This has been fixed. + :gl:`#5751` :gl:`!11584` + +