From: Mark Andrews <marka@isc.org>
Date: Mon, 30 Mar 2020 00:49:46 +0000 (+1100)
Subject: Add release note entry
X-Git-Tag: v9.14.12~3^2
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=ce1e502a743e4e1d1377514ca4f7ae667413c224;p=thirdparty%2Fbind9.git

Add release note entry
---

diff --git a/doc/arm/notes-9.14.12.xml b/doc/arm/notes-9.14.12.xml
index 94fc82e69b1..47b919e0efc 100644
--- a/doc/arm/notes-9.14.12.xml
+++ b/doc/arm/notes-9.14.12.xml
@@ -13,6 +13,13 @@
 
   <section xml:id="relnotes-9.14.12-security"><info><title>Security Fixes</title></info>
     <itemizedlist>
+      <listitem>
+        <para>
+          Replaying a TSIG BADTIME response as a request could
+          trigger an assertion failure. This was disclosed in
+          CVE-2020-8617. [GL #1703]
+        </para>
+      </listitem>
       <listitem>
         <para>
           DNS rebinding protection was ineffective when BIND 9 is configured as