Add CHANGES entry

This commit is contained in:
Mark Andrews 2020-03-31 14:02:22 +11:00 committed by Michał Kępień
parent 943b274e2c
commit 5040582843

View file

@ -1,3 +1,10 @@
5395. [security] Further limit the number of queries that can be
triggered from a request. Root and TLD servers
are no longer exempt from max-recursion-queries.
Fetches for missing name server address records
are limited to 4 for any domain. (CVE-2020-8616)
[GL #1388]
5390. [security] Replaying a TSIG BADTIME response as a request could
trigger an assertion failure. (CVE-2020-8617)
[GL #1703]