Add release note for [GL #4125]

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index ad69d13c21a4f4469f6b84abe87e00392de09734..4fc1975168c735ed3ecea77a8bee0c4902a088fc 100644 (file)
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -35,15 +35,19 @@ Feature Changes
 Bug Fixes
 ~~~~~~~~~
 
-- None.
-
 - The value of If-Modified-Since header in statistics channel was not checked
   for length leading to possible buffer overflow by an authorized user.  We
   would like to emphasize that statistics channel must be properly setup to
   allow access only from authorized users of the system. :gl:`#4124`
 
-  This was reported independently by Eric Sesterhenn of X41 D-SEC and Cameron
-  Whitehead.
+  This issue was reported independently by Eric Sesterhenn of X41 D-SEC and
+  Cameron Whitehead.
+
+- The value of Content-Length header in statistics channel was not bound checked
+  and negative or large enough value could lead to overflow and assertion failure.
+  :gl:`#4125`
+
+  This issue was reported by Eric Sesterhenn of X41 D-SEC.
 
 Known Issues
 ~~~~~~~~~~~~