Add CHANGES and release note for [GL #4481]

2024-06-10 16:49:56 +02:00
parent e28266bfbc
commit 1002f920f6
2 changed files with 8 additions and 1 deletions
@@ -1,3 +1,8 @@
+6399.	[security]	Malicious DNS client that sends many queries over
+			TCP but never reads responses can cause server to
+			respond slowly or not respond at all for other
+			clients. (CVE-2024-0760) [GL #4481]
+
 6398.	[bug]		Fix potential data races in our DoH implementation
 			related to HTTP/2 session object management and
 			endpoints set object management after reconfiguration.
@@ -15,7 +15,9 @@ Notes for BIND 9.19.25
 Security Fixes
 ~~~~~~~~~~~~~~

- None.
+- Malicious DNS client that sends many queries over TCP but never reads
+  responses can cause server to respond slowly or not respond at all for other
+  clients. :cve:`2024-0760` :gl:`#4481`

 New Features
 ~~~~~~~~~~~~