add release note entry

(cherry picked from commit b7442e43899dc8e765710e530130beb095257b8f)

diff --git a/doc/arm/notes-sec-fixes.xml b/doc/arm/notes-sec-fixes.xml
index ec9c5f6a4673e2f79a0529d87e63a9399a1e0dae..3e718fa2fc8f6f79b44ae3b4e96b581383715239 100644 (file)
--- a/doc/arm/notes-sec-fixes.xml
+++ b/doc/arm/notes-sec-fixes.xml
@@ -18,5 +18,13 @@
         This flaw is disclosed in CVE-2019-6471. [GL #942]
       </para>
     </listitem>
+    <listitem>
+      <para>
+       <command>named</command> could crash with an assertion failure
+       if a forwarder returned a referral, rather than resolving the
+       query, when QNAME minimization was enabled.  This flaw is
+       disclosed in CVE-2019-6476. [GL #1501]
+      </para>
+    </listitem>
   </itemizedlist>
 </section>