From: Artem Boldariev <artem@boldariev.com>
Date: Thu, 24 Mar 2022 11:18:39 +0000 (+0200)
Subject: Add release note entry for [GL #3216]
X-Git-Tag: v9.19.1~3^2
X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=6791500e96a258d0abef958d157ccf27626c7b10;p=thirdparty%2Fbind9.git

Add release note entry for [GL #3216]
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 660e0c5da00..1ba00c8088f 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -17,6 +17,14 @@ Security Fixes
 
 - None.
 
+- Previously, TLS socket objects could be destroyed prematurely, which
+  triggered assertion failures in :iscman:`named` instances serving
+  DNS-over-HTTPS (DoH) clients. This has been fixed.
+
+  ISC would like to thank Thomas Amgarten from arcade solutions ag for
+  bringing this vulnerability to our attention. (CVE-2022-1183)
+  :gl:`#3216`
+
 Known Issues
 ~~~~~~~~~~~~