From: Mark Andrews <marka@isc.org>
Date: Wed, 17 Jun 2015 01:19:53 +0000 (+1000)
Subject: add release notes for CVE-2015-4620
X-Git-Tag: v9.11.0a1~724
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=572e95f52a2156ab6147e29dd271f94a6a533537;p=thirdparty%2Fbind9.git

add release notes for CVE-2015-4620
---

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index c141e0c250e..d0a6c312706 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -38,6 +38,17 @@
   <sect2 id="relnotes_security">
     <title>Security Fixes</title>
     <itemizedlist>
+      <listitem>
+	<para>
+	  On servers configured to perform DNSSEC validation an
+	  assertion failure could be triggered on answers from
+	  a specially configured server.
+	</para>
+        <para>
+	  This flaw was discovered by Breno Silveira Soares, and is
+	  disclosed in CVE-2015-4620. [RT #39795]
+        </para>
+      </listitem> 
       <listitem>
 	<para>
 	  On servers configured to perform DNSSEC validation using