From: Josh Durgin <jdurgin@redhat.com>
Date: Thu, 14 May 2020 04:34:56 +0000 (-0700)
Subject: PendingReleaseNotes: note about security fix
X-Git-Tag: wip-pdonnell-testing-20200918.022351~1251^2
X-Git-Url: http://git-server-git.apps.pok.os.sepia.ceph.com/?a=commitdiff_plain;h=06f239fc35f35865d2cf92dda1ac8f4d5fe82bde;p=ceph-ci.git

PendingReleaseNotes: note about security fix

Signed-off-by: Josh Durgin <jdurgin@redhat.com>
---

diff --git a/PendingReleaseNotes b/PendingReleaseNotes
index 1e07562ef23..dec53694ca7 100644
--- a/PendingReleaseNotes
+++ b/PendingReleaseNotes
@@ -1,6 +1,8 @@
 >=15.0.0
 --------
 
+* CVE-2020-10736: Fixes an authorization bypass in monitor and manager daemons
+
 * The RGW "num_rados_handles" has been removed.
   * If you were using a value of "num_rados_handles" greater than 1
     multiply your current "objecter_inflight_ops" and