From: Petr Špaček <petr.spacek@nic.cz>
Date: Mon, 8 Jul 2019 10:56:51 +0000 (+0200)
Subject: NEWS: add merge request numbers for security fixes
X-Git-Tag: v4.1.0^2~47
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=fcede0517df26af58341ef1fbc644b08049c52f4;p=thirdparty%2Fknot-resolver.git

NEWS: add merge request numbers for security fixes
---

diff --git a/NEWS b/NEWS
index 000103e47..e5b8aea4c 100644
--- a/NEWS
+++ b/NEWS
@@ -3,7 +3,8 @@ Knot Resolver 4.1.0 (2019-07-10)
 
 Security
 --------
-- fix CVE-2019-10191: caching negative answer with forged QNAME+QTYPE
+- fix CVE-2019-10190: do not pass bogus negative answer to client (!827)
+- fix CVE-2019-10191: do not cache negative answer with forged QNAME+QTYPE (!839)
 
 Improvements
 ------------