[master] add CVE

diff --git a/CHANGES b/CHANGES
index 5f425bef3314cf38b91c1cb41b76b76ef5057d2f..ac1bf9ef3a9e8ea309096b15d29080fc41135cc6 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -24,15 +24,16 @@
                        named run-time, the previously loaded GeoIP
                        data could remain, potentially causing wrong
                        ACLs to be used or wrong results to be served
-                       based on geolocation. [RT #37720]
+                       based on geolocation (CVE-2014-8680). [RT #37720]
 
 4002.  [security]      Lookups in GeoIP databases that were not
-                       loaded could cause an assertion failure.
-                       [RT #37679]
+                       loaded could cause an assertion failure
+                       (CVE-2014-8680). [RT #37679]
 
 4001.  [security]      The caching of GeoIP lookups did not always
                        handle address families correctly, potentially
-                       resulting in an assertion failure. [RT #37672]
+                       resulting in an assertion failure (CVE-2014-8680).
+                       [RT #37672]
 
 4000.  [bug]           NXDOMAIN redirection incorrectly handled NXRRSET
                        from the redirect zone. [RT #37722]