From: Michał Kępień <michal@isc.org>
Date: Mon, 13 Jul 2026 10:40:29 +0000 (+0200)
Subject: Add release note for CVE-2026-11622
X-Git-Tag: v9.21.24~1^2~1
X-Git-Url: http://git.ipfire.org/gitweb/index.cgi?a=commitdiff_plain;h=007d7af5aa181d63ea74f24acff19f9d8003fb47;p=thirdparty%2Fbind9.git

Add release note for CVE-2026-11622
---

diff --git a/doc/notes/notes-9.21.24.rst b/doc/notes/notes-9.21.24.rst
index d8eb5909229..ae39303237d 100644
--- a/doc/notes/notes-9.21.24.rst
+++ b/doc/notes/notes-9.21.24.rst
@@ -91,6 +91,12 @@ Security Fixes
   now enforces that limit on negative answers and returns SERVFAIL once
   the limit is reached. :gl:`#4463`
 
+- Prevent cache exhaustion under sustained attack. :cve:`2026-11622`
+
+  Cache memory could become exhausted with expired entries whose memory
+  was not released, due to a sustained attack on the same DNS name that
+  prevented the cleanup. This has been fixed. :gl:`#4760`
+
 Removed Features
 ~~~~~~~~~~~~~~~~