Reorder release notes

diff --git a/doc/notes/notes-9.21.4.rst b/doc/notes/notes-9.21.4.rst
index 34d08723dc84975c63458d78f92d4fce0d053823..cc62e17575a4c6955e387695abc1a6e2e0478a17 100644 (file)
--- a/doc/notes/notes-9.21.4.rst
+++ b/doc/notes/notes-9.21.4.rst
@@ -127,6 +127,13 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
+- Querying an NSEC3-signed zone for an empty record could trigger an
+  assertion.
+
+  A bug in the qpzone database could trigger a crash when querying for a
+  deleted name, or a newly added empty non-terminal name, in an
+  NSEC3-signed zone. This has been fixed. :gl:`#5108`
+
 - Fix :iscman:`nsupdate` hang when processing a large update.
 
   To mitigate DNS flood attacks over a single TCP connection, throttle
@@ -178,13 +185,6 @@ Bug Fixes
   :iscman:`nslookup`, :iscman:`nsupdate`, or :iscman:`delv`. This has been
   fixed. :gl:`#5084`
 
-- Querying an NSEC3-signed zone for an empty record could trigger an
-  assertion.
-
-  A bug in the qpzone database could trigger a crash when querying for a
-  deleted name, or a newly added empty non-terminal name, in an
-  NSEC3-signed zone. This has been fixed. :gl:`#5108`
-
 - Fix response policy zones and catalog zones with an ``$INCLUDE`` statement
   defined.