add release notes for CVE-2015-4620

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index c141e0c250e5a2ff11bcda4eddb4ca5cfcccd1f9..d0a6c3127068b0151a8bdc3827048c8f9484e7f2 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -38,6 +38,17 @@
   <sect2 id="relnotes_security">
     <title>Security Fixes</title>
     <itemizedlist>
+      <listitem>
+       <para>
+         On servers configured to perform DNSSEC validation an
+         assertion failure could be triggered on answers from
+         a specially configured server.
+       </para>
+        <para>
+         This flaw was discovered by Breno Silveira Soares, and is
+         disclosed in CVE-2015-4620. [RT #39795]
+        </para>
+      </listitem> 
       <listitem>
        <para>
          On servers configured to perform DNSSEC validation using