PendingReleaseNotes: note about security fix

Signed-off-by: Josh Durgin <jdurgin@redhat.com>

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index 1e07562ef234988eaad7a6852531a49652ca31ea..dec53694ca77713a6d3854ca1ac8ec8bb2f10c64 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -1,6 +1,8 @@
 >=15.0.0
 --------
 
+* CVE-2020-10736: Fixes an authorization bypass in monitor and manager daemons
+
 * The RGW "num_rados_handles" has been removed.
   * If you were using a value of "num_rados_handles" greater than 1
     multiply your current "objecter_inflight_ops" and