CHANGES, release note

diff --git a/CHANGES b/CHANGES
index 19b891cad02a3d634bb8e1a7c0d8b9c9414b9c61..ec4a709c58dfdefdafa604f7e1ced94c19c9ef7b 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5452.  [bug]           The "blackhole" ACL was accidentally disabled with
+                       respect to client queries. [GL #1936]
+
 5451.  [func]          Add 'rndc dnssec -status' command. [GL #1612]
 
 5450.  [placeholder]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 7d161d4709f9495491c0de167d06f5f1502af719..f5c274b16f87b8a918ee1792528a5d3f356de201 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -57,3 +57,8 @@ Bug Fixes
   unsupported algorithm appeared earlier in the DNSKEY RRset than a
   supported algorithm.  It could also stop if it detected a malformed
   public key. [GL #1689]
+
+- The ``blackhole`` ACL was inadvertently disabled with respect to
+  client queries. Blocked IP addresses were not used for upstream
+  queries but queries from those addresses could still be answered.
+  [GL #1936]