Add CHANGES entry for #1718

(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)

diff --git a/CHANGES b/CHANGES
index 0b07c972a0da0adc1ff98c9f0d11162e5325deff..3312bc0e6148a47ef3c231506afeaa5d901b9548 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -6,6 +6,11 @@
                        whether a record would fit into a TCP message buffer.
                        (CVE-2020-8618) [GL #1850]
 
+5434.  [security]      It was possible to trigger an INSIST in
+                       lib/dns/rbtdb.c:new_reference() with a particular zone
+                       content and query patterns. (CVE-2020-8619) [GL #1111]
+                       [GL #1718]
+
 5431.  [func]          Reject DS records at the zone apex when loading
                        master files. Log but otherwise ignore attempts to
                        add DS records at the zone apex via UPDATE. [GL #1798]