From: Ondřej Surý <ondrej@isc.org>
Date: Thu, 1 Apr 2021 08:28:06 +0000 (+0200)
Subject: Add CHANGES and release note for GL #2607
X-Git-Tag: v9.17.12~18^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=66bd47a1291c4c887e39113537e761ff5cab5510;p=thirdparty%2Fbind9.git

Add CHANGES and release note for GL #2607
---

diff --git a/CHANGES b/CHANGES
index c01583ed8c5..2093d52eb8e 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,3 +1,6 @@
+5609.	[func]		GSSAPI support no longer uses the ISC SPNEGO
+			implementation. [GL #2607]
+
 5608.	[bug]		Dig now honors +retry=0 and +tries=1 when queries
 			are sent over TCP (+tcp) and the remote server closes
 			the connection prematurely. [GL #2490]
diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 96d83f53633..c43b733c9dc 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -34,7 +34,12 @@ Removed Features
 Feature Changes
 ~~~~~~~~~~~~~~~
 
-- None.
+- The GSSAPI no longer uses the ISC implementation of the SPNEGO
+  mechanism and instead relies on the SPNEGO implementation from the
+  system Kerberos library. All major Kerberos libraries contain the
+  SPNEGO mechanism implementation. This change was implemented in BIND
+  9.17.2, but it was not included in the release notes at the time.
+  [GL #2607]
 
 Bug Fixes
 ~~~~~~~~~