From: Mark Andrews <marka@isc.org>
Date: Wed, 3 Feb 2021 00:19:43 +0000 (+1100)
Subject: Add CHANGES entry for [GL #2467]
X-Git-Tag: v9.17.13~35^2~5^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=83ab536a305e0f43a042b7c3d5aa4d9149be3e46;p=thirdparty%2Fbind9.git

Add CHANGES entry for [GL #2467]
---

diff --git a/CHANGES b/CHANGES
index ad7b5865913..27981229960 100644
--- a/CHANGES
+++ b/CHANGES
@@ -45,7 +45,12 @@
 
 5616.	[placeholder]
 
-5615.	[placeholder]
+5615.	[security]	Insufficient IXFR checks could result in named serving a
+			zone without an SOA record at the apex, leading to a
+			RUNTIME_CHECK assertion failure when the zone was
+			subsequently refreshed. This has been fixed by adding an
+			owner name check for all SOA records which are included
+			in a zone transfer. (CVE-2021-25214) [GL #2467]
 
 5614.	[bug]		Ensure all resources are properly cleaned up when a call
 			to gss_accept_sec_context() fails. [GL #2620]