CHANGES, release note

(cherry picked from commit 9c492aba65c178f30baafeb5502013f95a9d5b9a) (cherry picked from commit ecb90158b6)
2018-07-13 13:33:29 -07:00
parent 71779a7427
commit 5fa73dbdf0
2 changed files with 11 additions and 0 deletions
@@ -1,3 +1,7 @@
+4997.	[security]	named could crash during recursive processing
+			of DNAME records when "deny-answer-aliases" was
+			in use. (CVE-2018-5740) [GL #387]
+
 	--- 9.11.4 released ---

 	--- 9.11.4rc2 released ---
@@ -76,6 +76,13 @@

  <section xml:id="relnotes_security"><info><title>Security Fixes</title></info>
    <itemizedlist>
+      <listitem>
+	<para>
+	  <command>named</command> could crash during recursive processing
+	  of DNAME records when <command>deny-answer-aliases</command> was
+	  in use. This flaw is disclosed in CVE-2018-5740. [GL #387]
+	</para>
+      </listitem>
      <listitem>
 	<para>
 	  When recursion is enabled but the <command>allow-recursion</command>