PendingReleaseNotes: note about security fix

Signed-off-by: Josh Durgin <jdurgin@redhat.com>
(cherry picked from commit 06f239fc35f35865d2cf92dda1ac8f4d5fe82bde)

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index c9fd4c79451858ebfc14b45b83b3ef7b8fc09050..6e07ce6d4e3faf855749841fa0a2805faedc71d4 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -1,6 +1,8 @@
 >=15.0.0
 --------
 
+* CVE-2020-10736: Fixes an authorization bypass in monitor and manager daemons
+
 * The RGW "num_rados_handles" has been removed.
   * If you were using a value of "num_rados_handles" greater than 1
     multiply your current "objecter_inflight_ops" and