add CHANGES and release notes entries

(cherry picked from commit 354ad18a12e84e5c660ce8e08e56382e529d8b2c)

diff --git a/CHANGES b/CHANGES
index deece4bf08376464edf12b911cc411b04cc3ee57..271e783f5d0870cf57f6322b2111966b395d0ceb 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -40,6 +40,10 @@
 5143.  [bug]           dnssec-keymgr and dnssec-coverage failed to find
                        key files for zone names ending in ".". [GL #560]
 
+5141.  [security]      Zone transfer controls for writable DLZ zones were
+                       not effective as the allowzonexfr method was not being
+                       called for such zones. (CVE-2019-6465) [GL #790]
+
 5140.  [bug]           Don't immediately mark existing keys as inactive and
                        deleted when running dnssec-keymgr for the first
                        time. [GL #117]

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index d210b7088fe06dd9d86681e8ba4d39ce5a824df8..0de05e397b44d96a82b1f65e59489444db629dad 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -105,6 +105,14 @@
          [GL #772]
        </para>
       </listitem>
+      <listitem>
+       <para>
+         Zone transfer controls for writable DLZ zones were not
+         effective as the <command>allowzonexfr</command> method was
+         not being called for such zones. This flaw is disclosed in
+         CVE-2019-6465. [GL #790]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>