Add CHANGES entry for 3517

(cherry picked from commit e3949029657e18e3bef5ec6d1a381d4c37b016b0)

diff --git a/CHANGES b/CHANGES
index 5456bcf7d23b5777fa4b71f29db9ae396e7f0a61..0020275c33a081f98c78421def54b362f53230ac 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5960.  [security]      Fix serve-stale crash that could happen when
+                       stale-answer-client-timeout was set to 0 and there was
+                       a stale CNAME in the cache for an incoming query.
+                       (CVE-2022-3080) [GL #3517]
+
 5959.  [security]      Fix memory leaks in the DH code when using OpenSSL 3.0.0
                        and later versions. The openssldh_compare(),
                        openssldh_paramcompare(), and openssldh_todns()