id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
5166	bind-9.10.0-P2/bind-utilities-9.10.0-P2	Fernando de Oliveira	Fernando de Oliveira	"[ftp://ftp.isc.org/isc/bind9/9.10.0-P2/bind-9.10.0-P2.tar.gz]

[ftp://ftp.isc.org/isc/bind9/9.10.0-P2/RELEASE-NOTES-BIND-9.10.0-P2.txt]

{{{
Introduction

   BIND 9.10.0-P2 is a security fix release of BIND 9.10 which also
   includes changes to address GCC optimization issues described in
   ISC Operational Notification https://kb.isc.org/article/AA-01167.

   This document summarizes features added or significantly changed
   since the previous major release, BIND 9.9. Bug fixes since BIND
   9.10.0 are also summarized. Changes marked with '**' have been added
   since the previous release (BIND 9.10.0-P1). Please see the CHANGES
   file in the source code release for a complete list of all changes.
...
Security

   A query specially crafted to exploit a defect in EDNS option
   processing can cause named to terminate with an assertion failure.
   This fixes a missing isc_buffer_availablelength check when
   printing out a packet.  [CVE-2014-3859] [RT #36078] **

   A programming error in the prefetch feature could cause named
   to crash with a ""REQUIRE"" assertion failure in name.c [CVE-2014-3214]
   [RT #35899]
...
}}}
"	enhancement	closed	normal	7.6	BOOK	SVN	medium	fixed