CHANGES, release note

(cherry picked from commit 332af50eed96cbcb20173f297e543adaded0ed92)

diff --git a/CHANGES b/CHANGES
index 9aaccd863d63e5e9e523fa18fc96fa9cc8d1626a..d41f48ba18ab5f8ebeff978be9a8a682d9f798a9 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5244.  [security]      Fixed a race condition in dns_dispatch_getnext()
+                       that could cause an assertion failure if a
+                       significant number of incoming packets were
+                       rejected. (CVE-2019-6471) [GL #942]
+
 5241.  [bug]           Fix Ed448 private and public key ASN.1 prefix blobs.
                        [GL #225]
 

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 00ce8f176db021e1b8d08b8c94a1895b1cd2c4e2..590caa33e156b6108480ae23eed64aaff7078d9d 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -79,6 +79,13 @@
          CVE-2018-5743. [GL #615]
        </para>
       </listitem>
+      <listitem>
+       <para>
+         A race condition could trigger an assertion failure when
+         a large number of incoming packets were being rejected.
+         This flaw is disclosed in CVE-2019-6471. [GL #942]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>