Add CHANGES entry and release note for GL #4383

(cherry picked from commit 04df558d57105ccfb9853ba892021c9de01d30c9)

diff --git a/CHANGES b/CHANGES
index e1fce27f79d1c7ade55aef17fb15b8ab0493831f..c73d3f52b8327c8d5c5c8d2dc153c56c9e478ddc 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,7 @@
+6319.  [security]      Query patterns that continuously triggered cache
+                       database maintenance could exhaust all available memory
+                       on the host running named. (CVE-2023-6516) [GL #4383]
+
 6317.  [security]      Restore DNS64 state when handling a serve-stale timeout.
                        (CVE-2023-5679) [GL #4334]
 

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 738f2ef042026a54758cce4766dd5414da9201ab..9cbc36310882797aa34041817c372a29ab6647e3 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -32,6 +32,15 @@ Security Fixes
   features were enabled. This has been fixed. :cve:`2023-5679`
   :gl:`#4334`
 
+- Query patterns that continuously triggered cache database maintenance
+  could cause an excessive amount of memory to be allocated, exceeding
+  ``max-cache-size`` and potentially leading to all available memory on
+  the host running :iscman:`named` being exhausted. This has been fixed.
+  :cve:`2023-6516`
+
+  ISC would like to thank Infoblox for bringing this vulnerability to
+  our attention. :gl:`#4383`
+
 New Features
 ~~~~~~~~~~~~