CHANGES, release note

(cherry picked from commit 244e44af432121a05e0a308b7ccce96a8ecd28ab)
(cherry picked from commit 79fad84bf6981dfd2a13971d966c0ebee057c448)

diff --git a/CHANGES b/CHANGES
index ae65fd45c80c7d37c754c22003e55034ea3f4822..ce73210f1e88fe1e553f9e2465228643334d673f 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -53,7 +53,9 @@
 
 5201.  [bug]           Fix a possible deadlock in RPZ update code. [GL #973]
 
-5200.  [placeholder]
+5200.  [security]      tcp-clients settings could be exceeded in some cases,
+                       which could lead to exhaustion of file descriptors.
+                       (CVE-2018-5743) [GL #615]
 
 5199.  [security]      In certain configurations, named could crash
                        if nxdomain-redirect was in use and a redirected

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index ff01aaa38f82fe6b17e741cb4466bcccb5d07877..18a9cc9c386dce3e9fc8ca5db73a7f8f3241ae6c 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -93,6 +93,13 @@
          cache. This flaw is disclosed in CVE-2019-6467. [GL #880]
        </para>
       </listitem>
+      <listitem>
+       <para>
+         The TCP client quota set using the <command>tcp-clients</command>
+         option could be exceeded in some cases. This could lead to
+         exhaustion of file descriptors. (CVE-2018-5743) [GL #615]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>