Add CHANGES entry for [GL #2467]

diff --git a/CHANGES b/CHANGES
index ad7b5865913d92f424280d8b05a64792c5e0399c..279812299606778b7bed6b2d9ce09b4b9b15be05 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -45,7 +45,12 @@
 
 5616.  [placeholder]
 
-5615.  [placeholder]
+5615.  [security]      Insufficient IXFR checks could result in named serving a
+                       zone without an SOA record at the apex, leading to a
+                       RUNTIME_CHECK assertion failure when the zone was
+                       subsequently refreshed. This has been fixed by adding an
+                       owner name check for all SOA records which are included
+                       in a zone transfer. (CVE-2021-25214) [GL #2467]
 
 5614.  [bug]           Ensure all resources are properly cleaned up when a call
                        to gss_accept_sec_context() fails. [GL #2620]