diff --git a/doc/arm/notes-9.14.12.xml b/doc/arm/notes-9.14.12.xml
index e0f96ed5c6..68130aa4ad 100644
--- a/doc/arm/notes-9.14.12.xml
+++ b/doc/arm/notes-9.14.12.xml
@@ -11,6 +11,18 @@
 
 <section xml:id="relnotes-9.14.12"><info><title>Notes for BIND 9.14.12</title></info>
 
+  <section xml:id="relnotes-9.14.12-security"><info><title>Security Fixes</title></info>
+    <itemizedlist>
+      <listitem>
+        <para>
+	  DNS rebinding protection was ineffective when BIND 9 is configured as
+	  a forwarding DNS server.  Found and responsibly reported by Tobias
+	  Klein.  [GL #1574]
+        </para>
+      </listitem>
+    </itemizedlist>
+  </section>
+
   <section xml:id="relnotes-9.14.12-bugs"><info><title>Bug Fixes</title></info>
     <itemizedlist>
       <listitem>