3693. [security] memcpy was incorrectly called with overlapping

                        ranges resulting a malformed names being generated
                        on some platforms.  This was subsequently detected
                        resulting in INSIST failures when serving NSEC3
                        signed zones.  [RT #35120]

diff --git a/CHANGES b/CHANGES
index 5a0b1e8e09de8eae6cdfd3abb9b900e8144ba85c..fb1724d3f3b408218f7ef648fcd5172afb3f9d27 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,9 @@
+3693.  [security]      memcpy was incorrectly called with overlapping
+                       ranges resulting a malformed names being generated
+                       on some platforms.  This was subsequently detected
+                       resulting in INSIST failures when serving NSEC3
+                       signed zones.  [RT #35120]
+
 3692.  [bug]           Two calls to dns_db_getoriginnode were fatal if there
                        was no data at the node. [RT #35080]