CHANGES, release note

(cherry picked from commit ef15f7360784c5ec7341f3e4856a759cf1e2aedb)

diff --git a/CHANGES b/CHANGES
index a65c5958c1bd23752bda5625f00ab299ad37aaf0..e46623206eb4f17fa01001596c8a0a6834380271 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+5200.  [security]      tcp-clients settings could be exceeded in some cases,
+                       which could lead to exhaustion of file descriptors.
+                       (CVE-2018-5743) [GL #615]
+
 5199.  [security]      In certain configurations, named could crash
                        if nxdomain-redirect was in use and a redirected
                        query resulted in an NXDOMAIN from the cache.

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 33b59547c311dfd821a8b146ccae5b17d2ae6c5c..1fe890917aac837f6c05710caf344ae1768f961c 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -48,6 +48,13 @@
          cache. This flaw is disclosed in CVE-2019-6467. [GL #880]
        </para>
       </listitem>
+      <listitem>
+       <para>
+         The TCP client quota set using the <command>tcp-clients</command>
+         option could be exceeded in some cases. This could lead to
+         exhaustion of file descriptors. (CVE-2018-5743) [GL #615]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>