From: Petr Špaček <pspacek@isc.org>
Date: Fri, 25 Feb 2022 14:14:10 +0000 (+0100)
Subject: Add CHANGES note for [GL #2950]
X-Git-Tag: v9.19.0~62^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=612f2778779565586dc1badca765c3a7740dc5d4;p=thirdparty%2Fbind9.git

Add CHANGES note for [GL #2950]
---

diff --git a/CHANGES b/CHANGES
index 0224b17784c..d05a7c67d04 100644
--- a/CHANGES
+++ b/CHANGES
@@ -41,7 +41,10 @@
 
 5818.	[placeholder]
 
-5817.	[placeholder]
+5817.	[security]	The rules for acceptance of records into the cache
+			have been tightened to prevent the possibility of
+			poisoning if forwarders send records outside
+			the configured bailiwick. (CVE-2021-25220) [GL #2950]
 
 5816.	[bug]		Make BIND compile with LibreSSL 3.5.0, as it was using
 			not very accurate pre-processor checks for using shims.