From: Artem Boldariev <artem@boldariev.com>
Date: Thu, 24 Mar 2022 11:18:39 +0000 (+0200)
Subject: Add release note entry for [GL #3216]
X-Git-Tag: v9.18.3~3^2
X-Git-Url: http://git.ipfire.org/gitweb/?a=commitdiff_plain;h=ea223b9b444c687a0f554f04e83fd79be76c00d4;p=thirdparty%2Fbind9.git

Add release note entry for [GL #3216]

(cherry picked from commit 6791500e96a258d0abef958d157ccf27626c7b10)
---

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index fd7a2d5acd2..c934af9de6e 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -17,6 +17,14 @@ Security Fixes
 
 - None.
 
+- Previously, TLS socket objects could be destroyed prematurely, which
+  triggered assertion failures in :iscman:`named` instances serving
+  DNS-over-HTTPS (DoH) clients. This has been fixed.
+
+  ISC would like to thank Thomas Amgarten from arcade solutions ag for
+  bringing this vulnerability to our attention. (CVE-2022-1183)
+  :gl:`#3216`
+
 Known Issues
 ~~~~~~~~~~~~