From: Evan Hunt <each@isc.org>
Date: Fri, 2 Mar 2018 19:53:38 +0000 (-0800)
Subject: fix CHANGE notes
X-Git-Tag: v9.13.0~123^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=91d8c1f95cc2ca31f7b6395db631b99eeb75bb10;p=thirdparty%2Fbind9.git

fix CHANGE notes
---

diff --git a/CHANGES b/CHANGES
index f1c4a20f8e8..558698f8f03 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,5 @@
+4904.   [bug]           Temporarily revert change #4859. [GL #124]
+
 4903.	[bug]		"check-mx fail;" did not prevent MX records containing
 			IP addresses from being added to a zone by a dynamic
 			update. [GL #112]
@@ -145,7 +147,11 @@
 
 4860.	[bug]		isc_int8_t should be signed char.  [RT #46973]
 
-4859.   [placeholder]
+4859.   [bug]           A loop was possible when attempting to validate
+                        unsigned CNAME responses from secure zones;
+                        this caused a delay in returning SERVFAIL and
+                        also increased the chances of encountering
+                        CVE-2017-3145. [RT #46839]
 
 4858.	[security]	Addresses could be referenced after being freed
 			in resolver.c, causing an assertion failure.