ComputerSurge/bind9
3
0
Fork 0
Code Pull Requests 1 Activity

Merge branch '185-fix-changes-entry' into 'master'

Browse Source 
Resolve "[CVE-2018-5737] serve-stale crash"

Closes #185

See merge request isc-projects/bind9!303
This commit is contained in:
Mukund Sivaraman
2018-05-21 13:31:41 -04:00
parent 1092590ef4 bfafcf89b8
commit 5f5fac6b92
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
CHANGES
View File

@@ -49,11 +49,12 @@
4935. [func] Add support for LibreSSL >= 2.7.0 (some OpenSSL 1.1.0
call were added). [GL #191]
4934. [security] Simultaneous use of stale cache records and NSEC
4934. [security] The serve-stale feature could cause an assertion failure
in rbtdb.c even when stale-answer-enable was false.
Simultaneous use of stale cache records and NSEC
aggressive negative caching could trigger a recursion
loop. (CVE-2018-5737) [GL #185]
4933. [bug] Not creating signing keys for an inline signed zone
prevented changes applied to the raw zone from being
reflected in the secure zone until signing keys were