From: Evan Hunt <each@isc.org>
Date: Thu, 3 Jan 2019 19:04:41 +0000 (-0800)
Subject: CHANGES, release note
X-Git-Tag: v9.15.0~25^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=4551c58e30acfdaeaf8677e713581bfb8e07e21d;p=thirdparty%2Fbind9.git

CHANGES, release note

(cherry picked from commit 244e44af432121a05e0a308b7ccce96a8ecd28ab)
(cherry picked from commit 79fad84bf6981dfd2a13971d966c0ebee057c448)
---

diff --git a/CHANGES b/CHANGES
index ae65fd45c80..ce73210f1e8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -53,7 +53,9 @@
 
 5201.	[bug]		Fix a possible deadlock in RPZ update code. [GL #973]
 
-5200.	[placeholder]
+5200.	[security]	tcp-clients settings could be exceeded in some cases,
+			which could lead to exhaustion of file descriptors.
+			(CVE-2018-5743) [GL #615]
 
 5199.	[security]	In certain configurations, named could crash
 			if nxdomain-redirect was in use and a redirected
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index ff01aaa38f8..18a9cc9c386 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -93,6 +93,13 @@
 	  cache. This flaw is disclosed in CVE-2019-6467. [GL #880]
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  The TCP client quota set using the <command>tcp-clients</command>
+	  option could be exceeded in some cases. This could lead to
+	  exhaustion of file descriptors. (CVE-2018-5743) [GL #615]
+	</para>
+      </listitem>
     </itemizedlist>
   </section>