diff --git a/CHANGES b/CHANGES index 695c66023a..2e9d4ef883 100644 --- a/CHANGES +++ b/CHANGES @@ -11,6 +11,23 @@ release the memory held by the dead view early. [GL #3801] + --- 9.16.37 released --- + +6067. [security] Fix serve-stale crash when recursive clients soft quota + is reached. (CVE-2022-3924) [GL #3619] + +6066. [security] Handle RRSIG lookups when serve-stale is active. + (CVE-2022-3736) [GL #3622] + +6064. [security] An UPDATE message flood could cause named to exhaust all + available memory. This flaw was addressed by adding a + new "update-quota" statement that controls the number of + simultaneous UPDATE messages that can be processed or + forwarded. The default is 100. A stats counter has been + added to record events when the update quota is + exceeded, and the XML and JSON statistics version + numbers have been updated. (CVE-2022-3094) [GL #3523] + 6062. [func] The DSCP implementation, which has only been partly operational since 9.16.0, is now marked as deprecated. Configuring DSCP values in named.conf diff --git a/bin/named/bind9.xsl b/bin/named/bind9.xsl index c145915a19..309e5d4bb7 100644 --- a/bin/named/bind9.xsl +++ b/bin/named/bind9.xsl @@ -2,7 +2,9 @@ - + + + diff --git a/bin/named/bind9.xsl.h b/bin/named/bind9.xsl.h index 3d3e200eda..fabb5fa879 100644 --- a/bin/named/bind9.xsl.h +++ b/bin/named/bind9.xsl.h @@ -8,7 +8,11 @@ static char xslmsg[] = "\n" " \n" - " \n" + " \n" + " \n" + " \n" " \n" " \n" "