Add CHANGES entry

diff --git a/CHANGES b/CHANGES
index fc11e3ed06578cd225001a0388c445f3fcc72b52..e312e13567ac58cbcd8f46b0e2b7d3468552a3b7 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -59,6 +59,13 @@
                        UV_UDP_RECVMMSG flag to enable recvmmsg() support in
                        libuv. [GL #1797]
 
+5395.  [security]      Further limit the number of queries that can be
+                       triggered from a request.  Root and TLD servers
+                       are no longer exempt from max-recursion-queries.
+                       Fetches for missing name server address records
+                       are limited to 4 for any domain. (CVE-2020-8616)
+                       [GL #1388]
+
 5394.  [cleanup]       Named formerly attempted to change the effective UID and
                        GID in named_os_openfile(), which could trigger a
                        spurious log message if they were already set to the