Commit 821f917d authored by Mark Andrews's avatar Mark Andrews Committed by Evan Hunt
Browse files

add CHANGES and release notes entries

parent a9307de8
...@@ -87,7 +87,9 @@ ...@@ -87,7 +87,9 @@
and "nsdname-enable" both now default to yes, and "nsdname-enable" both now default to yes,
regardless of compile-time settings. [GL #824] regardless of compile-time settings. [GL #824]
   
5141. [placeholder] 5141. [security] Zone transfer controls for writable DLZ zones were
not effective as the allowzonexfr method was not being
called for such zones. (CVE-2019-6465) [GL #790]
   
5140. [bug] Don't immediately mark existing keys as inactive and 5140. [bug] Don't immediately mark existing keys as inactive and
deleted when running dnssec-keymgr for the first deleted when running dnssec-keymgr for the first
......
...@@ -157,6 +157,14 @@ ...@@ -157,6 +157,14 @@
[GL #772] [GL #772]
</para> </para>
</listitem> </listitem>
<listitem>
<para>
Zone transfer controls for writable DLZ zones were not
effective as the <command>allowzonexfr</command> method was
not being called for such zones. This flaw is disclosed in
CVE-2019-6465. [GL #790]
</para>
</listitem>
</itemizedlist> </itemizedlist>
</section> </section>
......
Markdown is supported
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment