CHANGES, release note

(cherry picked from commit 5e18ad05f43a5f40deadde9b230f8e5bfb0e5e13)

diff --git a/CHANGES b/CHANGES
index aec3caa511f89a4b2198eb2475f205532c6bdd14..ad8ff9865b3ca2a9b3c19c7d5f858953e78c5fe4 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -31,6 +31,10 @@
 5203.  [bug]           Enforce whether key rdata exists or not in KEY,
                        DNSKEY, CDNSKEY and RKEY. [GL #899]
 
+5200.  [security]      tcp-clients settings could be exceeded in some cases,
+                       which could lead to exhaustion of file descriptors.
+                       (CVE-2018-5743) [GL #615]
+
 5197.  [bug]           dig could die in best effort mode on multiple SIG(0)
                        records. Similarly on multiple OPT and multiple TSIG
                        records. [GL #920]

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 79c499b7b4598812265f15d76e26a5a938600abc..8b098c4ec62039fcc47d24ef027f51c46a0e8878 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -76,6 +76,13 @@
          None.
        </para>
       </listitem>
+      <listitem>
+       <para>
+         The TCP client quota set using the <command>tcp-clients</command>
+         option could be exceeded in some cases. This could lead to
+         exhaustion of file descriptors. (CVE-2018-5743) [GL #615]
+       </para>
+      </listitem>
     </itemizedlist>
   </section>