Add release note for [GL #2467]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index cd3af2cb7b5fc72612c96b2ca0cd0ef75550f5f4..facaf0f46c54f80d56473e9d853035b94fab9493 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -14,7 +14,11 @@ Notes for BIND 9.17.12
 Security Fixes
 ~~~~~~~~~~~~~~
 
-- None.
+- A malformed incoming IXFR transfer could trigger an assertion failure
+  in ``named``, causing it to quit abnormally. (CVE-2021-25214)
+
+  ISC would like to thank Greg Kuechle of SaskTel for bringing this
+  vulnerability to our attention. [GL #2467]
 
 Known Issues
 ~~~~~~~~~~~~