PendingReleaseNotes: drop mention of CVE fix

CVEs fixed before the first stable Pacific release need not be mentioned
explicitly in the release notes.

Signed-off-by: Nathan Cutler <ncutler@suse.com>

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index 75838a22cb97bd8a66676b3088d42040c8302a5b..bfc978c8469ea33e13e5212a5d4e2fcc67cfda93 100644 (file)
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -1,8 +1,6 @@
 >=16.0.0
 --------
 
-* CVE-2020-10736: Fixes an authorization bypass in monitor and manager daemons
-
 * Monitors now have config option ``mon_allow_pool_size_one``, which is disabled
   by default. However, if enabled, user now have to pass the
   ``--yes-i-really-mean-it`` flag to ``osd pool set size 1``, if they are really