33 lines
1.2 KiB
XML
33 lines
1.2 KiB
XML
<!--
|
|
- Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
-
|
|
- This Source Code Form is subject to the terms of the Mozilla Public
|
|
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
- file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
-
|
|
- See the COPYRIGHT file distributed with this work for additional
|
|
- information regarding copyright ownership.
|
|
-->
|
|
|
|
<section xml:id="relnotes-9.11.37"><info><title>Notes for BIND 9.11.37</title></info>
|
|
|
|
<section xml:id="relnotes-9.11.37-security"><info><title>Security Fixes</title></info>
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
The rules for acceptance of records into the cache have been tightened
|
|
to prevent the possibility of poisoning if forwarders send records
|
|
outside the configured bailiwick. (CVE-2021-25220)
|
|
</para>
|
|
<para>
|
|
ISC would like to thank Xiang Li, Baojun Liu, and Chaoyi Lu from
|
|
Network and Information Security Lab, Tsinghua University, and
|
|
Changgen Zou from Qi An Xin Group Corp. for bringing this
|
|
vulnerability to our attention. [GL #2950]
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</section>
|
|
|
|
</section>
|