Add CHANGES entry for 3517

diff --git a/CHANGES b/CHANGES
index 16fe2b9067598bf695301bdf3d9717e4f20b4876..fef42b10bde133f5dd56a9f64178b46c40418a6a 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -2,7 +2,10 @@
 
 5961.  [placeholder]
 
-5960.  [placeholder]
+5960.  [security]      Fix serve-stale crash that could happen when
+                       stale-answer-client-timeout was set to 0 and there was
+                       a stale CNAME in the cache for an incoming query.
+                       (CVE-2022-3080) [GL #3517]
 
 5959.  [security]      Fix memory leaks in the DH code when using OpenSSL 3.0.0
                        and later versions. The openssldh_compare(),