Add release note for GL #4459

diff --git a/doc/notes/notes-9.16.48.rst b/doc/notes/notes-9.16.48.rst
index 6521b42f4be3e71dc59ec1d24dadb6a0eae9a039..917e551f63da4c994aad799dc1527f096610eae2 100644 (file)
--- a/doc/notes/notes-9.16.48.rst
+++ b/doc/notes/notes-9.16.48.rst
@@ -24,6 +24,10 @@ Security Fixes
   Applied Cybersecurity ATHENE for bringing this vulnerability to our
   attention. :gl:`#4424`
 
+- Preparing an NSEC3 closest encloser proof could cause excessive CPU
+  load, leading to a denial-of-service condition. This has been fixed.
+  :cve:`2023-50868` :gl:`#4459`
+
 - Parsing DNS messages with many different names could cause excessive
   CPU load. This has been fixed. :cve:`2023-4408`