CHANGES and relnotes for [GL #4728]

diff --git a/CHANGES b/CHANGES
index c76567bcab1ce9049f2f0888ac078278b9d6cb5e..2323d2700347519207ceb1caa6e2d35986a29e97 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6396.  [func]          Outgoing zone transfers are no longer enabled by
+                       default. To enable them, an "allow-transfer" ACL
+                       must be specified. [GL #4728]
+
 6395.  [bug]           Handle ISC_R_HOSTDOWN and ISC_R_NETDOWN in resolver.c.
                        [GL #4736]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 0b57512d6ed18dd3d68890b9ee5f6c9af34aaf6a..ee6f2ef748e241fa5e6601353dfd5532c5d439ac 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -32,7 +32,9 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- Outgoing zone transfers are no longer enabled by default. An explicit
+  :any:`allow-transfer` ACL must now be set at the :any:`zone`, :any:`view` or
+  :namedconf:ref:`options` level to enable outgoing transfers. :gl:`#4728`
 
 Bug Fixes
 ~~~~~~~~~