From ecd77e610bbbd9905bda1ebfe76eaf37d6c6f866 Mon Sep 17 00:00:00 2001 From: Mark Andrews Date: Tue, 20 Jun 2023 15:38:40 +1000 Subject: [PATCH] Add release note for [GL #4152] --- doc/notes/notes-current.rst | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst index 6b35550361..9cd2daac3e 100644 --- a/doc/notes/notes-current.rst +++ b/doc/notes/notes-current.rst @@ -15,7 +15,13 @@ Notes for BIND 9.19.17 Security Fixes ~~~~~~~~~~~~~~ -- None. +- Previously, sending a specially crafted message over the control + channel could cause the packet-parsing code to run out of available + stack memory, causing :iscman:`named` to terminate unexpectedly. + This has been fixed. (CVE-2023-3341) + + ISC would like to thank Eric Sesterhenn from X41 D-Sec GmbH for + bringing this vulnerability to our attention. :gl:`#4152` New Features ~~~~~~~~~~~~