From 6791500e96a258d0abef958d157ccf27626c7b10 Mon Sep 17 00:00:00 2001
From: Artem Boldariev <artem@boldariev.com>
Date: Thu, 24 Mar 2022 13:18:39 +0200
Subject: [PATCH] Add release note entry for [GL #3216]

---
 doc/notes/notes-current.rst | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/doc/notes/notes-current.rst b/doc/notes/notes-current.rst
index 660e0c5da0..1ba00c8088 100644
--- a/doc/notes/notes-current.rst
+++ b/doc/notes/notes-current.rst
@@ -17,6 +17,14 @@ Security Fixes
 
 - None.
 
+- Previously, TLS socket objects could be destroyed prematurely, which
+  triggered assertion failures in :iscman:`named` instances serving
+  DNS-over-HTTPS (DoH) clients. This has been fixed.
+
+  ISC would like to thank Thomas Amgarten from arcade solutions ag for
+  bringing this vulnerability to our attention. (CVE-2022-1183)
+  :gl:`#3216`
+
 Known Issues
 ~~~~~~~~~~~~