77 lines
2.9 KiB
XML
77 lines
2.9 KiB
XML
<!--
|
|
- Copyright (C) Internet Systems Consortium, Inc. ("ISC")
|
|
-
|
|
- This Source Code Form is subject to the terms of the Mozilla Public
|
|
- License, v. 2.0. If a copy of the MPL was not distributed with this
|
|
- file, you can obtain one at https://mozilla.org/MPL/2.0/.
|
|
-
|
|
- See the COPYRIGHT file distributed with this work for additional
|
|
- information regarding copyright ownership.
|
|
-->
|
|
|
|
<section xml:id="relnotes-9.11.22"><info><title>Notes for BIND 9.11.22</title></info>
|
|
|
|
<section xml:id="relnotes-9.11.22-security"><info><title>Security Fixes</title></info>
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
It was possible to trigger an assertion failure when verifying the
|
|
response to a TSIG-signed request. This was disclosed in
|
|
CVE-2020-8622.
|
|
</para>
|
|
<para>
|
|
ISC would like to thank Dave Feldman, Jeff Warren, and Joel Cunningham
|
|
of Oracle for bringing this vulnerability to our attention. [GL #2028]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
When BIND 9 was compiled with native PKCS#11 support, it was possible
|
|
to trigger an assertion failure in code determining the number of bits
|
|
in the PKCS#11 RSA public key with a specially crafted packet. This
|
|
was disclosed in CVE-2020-8623.
|
|
</para>
|
|
<para>
|
|
ISC would like to thank Lyu Chiy for bringing this vulnerability to
|
|
our attention. [GL #2037]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
<command>update-policy</command> rules of type
|
|
<command>subdomain</command> were incorrectly treated as
|
|
<command>zonesub</command> rules, which allowed keys used in
|
|
<command>subdomain</command> rules to update names outside of the
|
|
specified subdomains. The problem was fixed by making sure
|
|
<command>subdomain</command> rules are again processed as described in
|
|
the ARM. This was disclosed in CVE-2020-8624.
|
|
</para>
|
|
<para>
|
|
ISC would like to thank Joop Boonen of credativ GmbH for bringing this
|
|
vulnerability to our attention. [GL #2055]
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</section>
|
|
|
|
<section xml:id="relnotes-9.11.22-bugs"><info><title>Bug Fixes</title></info>
|
|
<itemizedlist>
|
|
<listitem>
|
|
<para>
|
|
Wildcard RPZ passthru rules could incorrectly be overridden by other
|
|
rules that were loaded from RPZ zones which appeared later in the
|
|
<command>response-policy</command> statement. This has been fixed.
|
|
[GL #1619]
|
|
</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>
|
|
LMDB locking code was revised to make <command>rndc reconfig</command>
|
|
work properly on FreeBSD and with LMDB >= 0.9.26. [GL #1976]
|
|
</para>
|
|
</listitem>
|
|
</itemizedlist>
|
|
</section>
|
|
|
|
</section>
|