Add CHANGES and release notes for GL #2487

(cherry picked from commit 6d442e9c043dfd5bfb9d7af392dd19adc6ecc129)

diff --git a/CHANGES b/CHANGES
index 98fc1b15002b86d79f3e0aa3e6ba6632510232b0..3bd9be0d47b50193593e673a4eed9eb9e35c4ca4 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5584.  [bug]           Rollback setting IP_DONTFRAG option on the UDP sockets.
+                       [GL #2487]
+
 5582.  [bug]           BIND 9 failed to build when static OpenSSL libraries
                        were used and the *.pc files for libssl and/or libcrypto
                        were unavailable. This has been fixed by ensuring the

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 9738f00ff582607b6eeb9827565f1e0d68a34cdf..23057488ead26f764752426813fbafe62f276c89 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -115,3 +115,8 @@ Bug Fixes
   predecessor keys. BIND 9 now implements a recursive successor relation, as
   described in the paper "Flexible and Robust Key Rollover" (Equation (2)).
   [GL #2375]
+
+- If an outgoing packet would exceed max-udp-size, it would be dropped instead
+  of sending a proper response back.  Rollback setting the IP_DONTFRAG on the
+  UDP sockets that we enabled during the DNS Flag Day 2020 to fix this issue.
+  [GL #2487]