Add CHANGES entry for [GL #2540]

diff --git a/CHANGES b/CHANGES
index 1a71c6ba99f55a38c8092d1312d3c72c20f0934d..1c94dba3a765f2860b4066ea19cdcf4603883799 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -5,6 +5,10 @@
                        configuration included the "tkey-gssapi-credential"
                        option. This has been fixed. [GL #2634]
 
+5616.  [security]      named crashed when a DNAME record placed in the ANSWER
+                       section during DNAME chasing turned out to be the final
+                       answer to a client query. (CVE-2021-25215) [GL #2540]
+
 5615.  [security]      Insufficient IXFR checks could result in named serving a
                        zone without an SOA record at the apex, leading to a
                        RUNTIME_CHECK assertion failure when the zone was