Add release notes for #1850

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 1e3f6ac96c90e9f275c2675d7214a19833ec46b4..ae1bf3785b25400f4158a4b499af1a8a0159978a 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -25,6 +25,9 @@ Security Fixes
 -  Replaying a TSIG BADTIME response as a request could trigger an
    assertion failure. This was disclosed in CVE-2020-8617. [GL #1703]
 
+-  It was possible to trigger an assertion when attempting to fill an
+   oversized TCP buffer. This was disclosed in CVE-2020-8618. [GL #1850]
+
 Known Issues
 ~~~~~~~~~~~~