Add CHANGES and release note for [GL #4481]

diff --git a/CHANGES b/CHANGES
index 7f5b381442f60d192afb25e954b833c748b0c571..3165203b82ad6f3ebebd04cbe793a724ce932d76 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+6399.  [security]      Malicious DNS client that sends many queries over
+                       TCP but never reads responses can cause server to
+                       respond slowly or not respond at all for other
+                       clients. (CVE-2024-0760) [GL #4481]
+
 6398.  [bug]           Fix potential data races in our DoH implementation
                        related to HTTP/2 session object management and
                        endpoints set object management after reconfiguration.

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 4a3db14ed4c6bf64656dfc9afc74678f14698316..1cda5eeab3863be8551f15d6f04280dfcf299a09 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -15,7 +15,9 @@ Notes for BIND 9.19.25
 Security Fixes
 ~~~~~~~~~~~~~~
 
-- None.
+- Malicious DNS client that sends many queries over TCP but never reads
+  responses can cause server to respond slowly or not respond at all for other
+  clients. :cve:`2024-0760` :gl:`#4481`
 
 New Features
 ~~~~~~~~~~~~