From: Petr Špaček <pspacek@isc.org>
Date: Fri, 25 Feb 2022 14:14:10 +0000 (+0100)
Subject: Add CHANGES note for [GL #2950]
X-Git-Tag: v9.16.27~3^2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=b1280c7a0d2f9ceab3d92a66ff9584503f73c765;p=thirdparty%2Fbind9.git

Add CHANGES note for [GL #2950]
---

diff --git a/CHANGES b/CHANGES
index 95345869ecf..6b1f0662917 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5817.	[security]	The rules for acceptance of records into the cache
+			have been tightened to prevent the possibility of
+			poisoning if forwarders send records outside
+			the configured bailiwick. (CVE-2021-25220) [GL #2950]
+
 5816.	[bug]		Make BIND compile with LibreSSL 3.5.0, as it was using
 			not very accurate pre-processor checks for using shims.
 			[GL #3172]