From: Mark Andrews <marka@isc.org>
Date: Wed, 3 Feb 2021 00:19:43 +0000 (+1100)
Subject: Add CHANGES entry for [GL #2467]
X-Git-Tag: v9.17.12~4^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=a3e4017c28fa87c5bd6ed6d0c37920fc7bff3c32;p=thirdparty%2Fbind9.git

Add CHANGES entry for [GL #2467]
---

diff --git a/CHANGES b/CHANGES
index a7acefc77da..fd1f4533374 100644
--- a/CHANGES
+++ b/CHANGES
@@ -2,7 +2,12 @@
 
 5616.	[placeholder]
 
-5615.	[placeholder]
+5615.	[security]	Insufficient IXFR checks could result in named serving a
+			zone without an SOA record at the apex, leading to a
+			RUNTIME_CHECK assertion failure when the zone was
+			subsequently refreshed. This has been fixed by adding an
+			owner name check for all SOA records which are included
+			in a zone transfer. (CVE-2021-25214) [GL #2467]
 
 5614.	[bug]		Ensure all resources are properly cleaned up when a call
 			to gss_accept_sec_context() fails. [GL #2620]