From 33cc2edb8ef072fb2da1064160ecf7c351abe68c Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Thu, 30 Mar 2017 02:56:33 +1100 Subject: [PATCH] add CVE-2017-3138 (cherry picked from commit fe1ad70e510d2327f9decf5096915becbc2c95c0) --- doc/arm/notes.xml | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 0140343b50..07ac993c25 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -93,6 +93,12 @@
Security Fixes + + + 'rndc ""' could trigger a assertion failure in named. This flaw + is disclosed in (CVE-2017-3138). [RT #44924] + + Some chaining (i.e., type CNAME or DNAME) responses to upstream