From: Mark Andrews <marka@isc.org>
Date: Tue, 31 Mar 2020 03:02:22 +0000 (+1100)
Subject: Add CHANGES entry
X-Git-Tag: v9.17.2~67^2^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=83965f70dff81b5bbe43eb4250100a822fde9116;p=thirdparty%2Fbind9.git

Add CHANGES entry
---

diff --git a/CHANGES b/CHANGES
index ce1860a8dd7..1e86ad87eb8 100644
--- a/CHANGES
+++ b/CHANGES
@@ -71,7 +71,12 @@
 			UV_UDP_RECVMMSG flag to enable recvmmsg() support in
 			libuv. [GL #1797]
 
-5395.	[placeholder]
+5395.	[security]	Further limit the number of queries that can be
+			triggered from a request.  Root and TLD servers
+			are no longer exempt from max-recursion-queries.
+			Fetches for missing name server address records
+			are limited to 4 for any domain. (CVE-2020-8616)
+			[GL #1388]
 
 5394.	[cleanup]	Named formerly attempted to change the effective UID and
 			GID in named_os_openfile(), which could trigger a