Add CHANGES entry

diff --git a/CHANGES b/CHANGES
index ce1860a8dd73740dc57fb2347eea575de4c32711..1e86ad87eb83301250e9a8ff32fd28168a7b9eb2 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -71,7 +71,12 @@
                        UV_UDP_RECVMMSG flag to enable recvmmsg() support in
                        libuv. [GL #1797]
 
-5395.  [placeholder]
+5395.  [security]      Further limit the number of queries that can be
+                       triggered from a request.  Root and TLD servers
+                       are no longer exempt from max-recursion-queries.
+                       Fetches for missing name server address records
+                       are limited to 4 for any domain. (CVE-2020-8616)
+                       [GL #1388]
 
 5394.  [cleanup]       Named formerly attempted to change the effective UID and
                        GID in named_os_openfile(), which could trigger a