Add CHANGES note for [GL #2950]

diff --git a/CHANGES b/CHANGES
index 0ebef39960f4e00a8b5927007c1a806d0a5136b8..00cd9a619cc4525d69114d6f2db11b884d93b8c1 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,8 @@
+5817.  [security]      The rules for acceptance of records into the cache
+                       have been tightened to prevent the possibility of
+                       poisoning if forwarders send records outside
+                       the configured bailiwick. (CVE-2021-25220) [GL #2950]
+
        --- 9.11.36 released ---
 
 5736.  [security]      The "lame-ttl" option is now forcibly set to 0. This