update to 9.7.2-P3

[tridge/bind9.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index b7bedb8d92d2cfbfb349780f9b6fa2182fc174c8..206acf53f0e70b1770f58847db4cd11f5e4f2daa 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,37 @@
+       --- 9.7.2-P3 released ---
+
+2973.  [bug]           bind.keys.h was being removed by the "make clean"
+                       at the end of configure resulting in build failures
+                       where there is very old version of perl installed.
+                       Move it to "make maintainer-clean". [RT #22230]
+
+2972.  [bug]           win32: address windows socket errors. [RT #21906]
+
+2971.  [bug]           Fixed a bug that caused journal files not to be
+                       compacted on Windows systems as a result of
+                       non-POSIX-compliant rename() semantics. [RT #22434]
+
+2970.  [security]      Adding a NO DATA negative cache entry failed to clear
+                       any matching RRSIG records.  A subsequent lookup of
+                       of NO DATA cache entry could trigger a INSIST when the
+                       unexpected RRSIG was also returned with the NO DATA
+                       cache entry.
+
+                       CVE-2010-3613, VU#706148. [RT #22288]
+
+2969.  [security]      Fix acl type processing so that allow-query works
+                       in options and view statements.  Also add a new
+                       set of tests to verify proper functioning.
+
+                       CVE-2010-3615, VU#510208. [RT #22418]
+
+2968.  [security]      Named could fail to prove a data set was insecure
+                       before marking it as insecure.  One set of conditions
+                       that can trigger this occurs naturally when rolling
+                       DNSKEY algorithms.
+
+                       CVE-2010-3614, VU#837744. [RT #22309]
+
        --- 9.7.2-P2 released ---
 
 2963.  [security]      The allow-query acl was being applied instead of the