From: Mark Andrews <marka@isc.org>
Date: Sun, 9 Dec 2018 22:13:05 +0000 (+1100)
Subject: add CHANGES and release note entries
X-Git-Tag: v9.15.0~140^2~1
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=9ae991751cd29d83b1c17ed5c8dbedb9df21270d;p=thirdparty%2Fbind9.git

add CHANGES and release note entries
---

diff --git a/CHANGES b/CHANGES
index 0fef5cd3666..0839f621222 100644
--- a/CHANGES
+++ b/CHANGES
@@ -184,7 +184,8 @@
 5111.	[bug]		Occluded DNSKEY records could make it into the
 			delegating NSEC/NSEC3 bitmap. [GL #742]
 
-5110.	[placeholder]
+5110.	[security]	Named leaked memory if there were multiple Key Tag
+			EDNS options present. (CVE-2018-5744) [GL #772]
 
 5109.	[cleanup]	Remove support for RSAMD5 algorithm. [GL #628]
 
diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index e7ebbd0fb2e..79256ea5c19 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -148,6 +148,15 @@
 	  by BIND 9.  This flaw is disclosed in CVE-2018-5745. [GL #780]
 	</para>
       </listitem>
+      <listitem>
+	<para>
+	  <command>named</command> leaked memory when processing a
+	  request with multiple Key Tag EDNS options present. ISC
+	  would like to thank Toshifumi Sakaguchi for bringing this
+	  to our attention.  This flaw is disclosed in CVE-2018-5744.
+	  [GL #772]
+	</para>
+      </listitem>
     </itemizedlist>
   </section>