add CHANGES

(cherry picked from commit 21553af7cc17ab4732ea768a70c285c240296d25)

diff --git a/CHANGES b/CHANGES
index 678df48ee271be8d7f213731ce7e8f7f1dc622de..e9c8fe1025fc561432d9e3e2beb915a3e48053a8 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5298.  [security]      Named could assert if a forwarder returned a
+                       referral, rather than resolving the query, when QNAME
+                       minimization was enabled. (CVE-2019-6476) [GL #1051]
+
 5297.  [bug]           Check whether a previous QNAME minimization fetch
                        is still running before starting a new one; return
                        SERVFAIL and log an error if so. [GL #1191]
@@ -135,7 +139,7 @@
                        code in a high-load cold-cache resolver scenario.
                        [GL #943]
 
-5242.  [bug]           In relaxed qname minimizatiom mode, fall back to
+5242.  [bug]           In relaxed qname minimization mode, fall back to
                        normal resolution when encountering a lame
                        delegation, and use _.domain/A queries rather
                        than domain/NS. [GL #1055]