From ce1e502a743e4e1d1377514ca4f7ae667413c224 Mon Sep 17 00:00:00 2001
From: Mark Andrews <marka@isc.org>
Date: Mon, 30 Mar 2020 11:49:46 +1100
Subject: [PATCH] Add release note entry

---
 doc/arm/notes-9.14.12.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/doc/arm/notes-9.14.12.xml b/doc/arm/notes-9.14.12.xml
index 94fc82e69b..47b919e0ef 100644
--- a/doc/arm/notes-9.14.12.xml
+++ b/doc/arm/notes-9.14.12.xml
@@ -13,6 +13,13 @@
 
   <section xml:id="relnotes-9.14.12-security"><info><title>Security Fixes</title></info>
     <itemizedlist>
+      <listitem>
+        <para>
+          Replaying a TSIG BADTIME response as a request could
+          trigger an assertion failure. This was disclosed in
+          CVE-2020-8617. [GL #1703]
+        </para>
+      </listitem>
       <listitem>
         <para>
           DNS rebinding protection was ineffective when BIND 9 is configured as