<!--
 - Copyright (C) Internet Systems Consortium, Inc. ("ISC")
 -
 - This Source Code Form is subject to the terms of the Mozilla Public
 - License, v. 2.0. If a copy of the MPL was not distributed with this
 - file, you can obtain one at https://mozilla.org/MPL/2.0/.
 -
 - See the COPYRIGHT file distributed with this work for additional
 - information regarding copyright ownership.
-->

<section xml:id="relnotes-9.11.37"><info><title>Notes for BIND 9.11.37</title></info>

  <section xml:id="relnotes-9.11.37-security"><info><title>Security Fixes</title></info>
    <itemizedlist>
      <listitem>
        <para>
          The rules for acceptance of records into the cache have been tightened
          to prevent the possibility of poisoning if forwarders send records
          outside the configured bailiwick. (CVE-2021-25220)
        </para>
        <para>
          ISC would like to thank Xiang Li, Baojun Liu, and Chaoyi Lu from
          Network and Information Security Lab, Tsinghua University, and
          Changgen Zou from Qi An Xin Group Corp. for bringing this
          vulnerability to our attention. [GL #2950]
        </para>
      </listitem>
    </itemizedlist>
  </section>

</section>
