From: Evan Hunt <each@isc.org>
Date: Wed, 28 Jul 2021 01:02:03 +0000 (-0700)
Subject: Add CHANGES and release notes for [GL #2839]
X-Git-Tag: v9.17.18~32^2~4^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=265fae928a47b06ea60b90033d5cc3722deb6363;p=thirdparty%2Fbind9.git

Add CHANGES and release notes for [GL #2839]
---

diff --git a/CHANGES b/CHANGES
index 031208f2ff4..3ae10f17e23 100644
--- a/CHANGES
+++ b/CHANGES
@@ -29,7 +29,9 @@
 			predecessor key that does not need to be refreshed.
 			[GL #1551]
 
-5689.	[placeholder]
+5689.	[security]	An assertion failure occurred when rate-limiting
+			was applied to a UDP packet exceeding the link MTU
+			size. (CVE-2021-25218) [GL #2839]
 
 5688.	[bug]		Inline and dnssec-policy zones could fail to apply
 			changes from the unsigned zone to the signed zone
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index e17d4ebb8c6..38ae0384008 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -20,6 +20,10 @@ Security Fixes
   the opcode of those responses and rejecting the messages if they don't
   match the expected value. :gl:`#2762`
 
+- Fix an assertion failure that occured in ``named`` when attempting to send
+  a UDP packet exceeding the MTU size if rate-limiting was enabled.
+  (CVE-2021-25218) :gl:`#2839`
+
 Known Issues
 ~~~~~~~~~~~~