Add CHANGES entry for #1718

(cherry picked from commit d7c26a97c82c256e00b167c65a70fb304a7320d4)

diff --git a/CHANGES b/CHANGES
index d3d6d10b3e545c9827349400605438c2c1d331f4..1c25e7dfce214e401121585c5acdd63e38e5facc 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -11,6 +11,11 @@
                        whether a record would fit into a TCP message buffer.
                        (CVE-2020-8618) [GL #1850]
 
+5434.  [security]      It was possible to trigger an INSIST in
+                       lib/dns/rbtdb.c:new_reference() with a particular zone
+                       content and query patterns. (CVE-2020-8619) [GL #1111]
+                       [GL #1718]
+
 5431.  [func]          Reject DS records at the zone apex when loading
                        master files. Log but otherwise ignore attempts to
                        add DS records at the zone apex via UPDATE. [GL #1798]