diff --git a/CHANGES b/CHANGES index 0b8494f518..ae65fd45c8 100644 --- a/CHANGES +++ b/CHANGES @@ -55,7 +55,10 @@ 5200. [placeholder] -5199. [placeholder] +5199. [security] In certain configurations, named could crash + if nxdomain-redirect was in use and a redirected + query resulted in an NXDOMAIN from the cache. + (CVE-2019-6467) [GL #880] 5198. [bug] If a fetch context was being shut down and, at the same time, we returned from qname minimization, an INSIST diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml index 4ddca00572..ff01aaa38f 100644 --- a/doc/arm/notes.xml +++ b/doc/arm/notes.xml @@ -87,7 +87,10 @@ - None. + In certain configurations, named could crash + with an assertion failure if nxdomain-redirect + was in use and a redirected query resulted in an NXDOMAIN from the + cache. This flaw is disclosed in CVE-2019-6467. [GL #880]