Add CHANGES and release note for #1933

diff --git a/CHANGES b/CHANGES
index 4d69ed5372025ecd50417e7a52400de3c34c50f1..1ef3b55bf8502e5e29e4fb14622d08104a2984b6 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+5445.  [cleanup]       Disable and disallow static linking. [GL #1933]
+
 5444.  [bug]           'rndc dnstap -roll <value>' was not limiting the
                        number of saved files to <value>. [GL !3728]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 862929d49e56879b9cf6b5f4b369696005f92f5d..8c6e86a3b98af4d2c185de8809fae4e5ce7ac225 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -29,7 +29,12 @@ New Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- Disable and disallow static linking of BIND 9 binaries and libraries
+  as BIND 9 modules require ``dlopen()`` support and static linking also
+  prevents using security features like read-only relocations (RELRO) or
+  address space layout randomization (ASLR) which are important for
+  programs that interact with the network and process arbitrary user
+  input. [GL #1933]
 
 Bug Fixes
 ~~~~~~~~~