add note for rt42694

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 22ad79f8af4ff62851c8d857afb4db9179cae646..dfeeeb980b16230c129ad3b39cb25759b81fbeee 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -46,7 +46,11 @@
     <itemizedlist>
       <listitem>
        <para>
-         None.
+         getrrsetbyname with a non absolute name could trigger a
+         infinite recursion bug in lwresd and named with lwres
+         configured if when combined with a search list entry the
+         resulting name is too long.  This flaw is disclosed in
+         CVE-2016-XXXX.
        </para>
       </listitem>
     </itemizedlist>