re-order security list into reverse order

diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index 7e2c6f9f2492dca020f934be99f4bb1f54d1277d..16d2928cb2076bdc22aa7f27d4b916b4f7ca80df 100644 (file)
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -42,18 +42,16 @@
     <itemizedlist>
       <listitem>
        <para>
-         Insufficient testing when parsing a message allowed
-         records with an incorrect class to be be accepted,
-         triggering a REQUIRE failure when those records
-         were subsequently cached.  This flaw is disclosed
-         in CVE-2015-8000. [RT #40987]
+         The resolver could abort with an assertion failure due to
+         improper DNAME handling when parsing fetch reply
+         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
        </para>
       </listitem>
       <listitem>
        <para>
-         Incorrect reference counting could result in an INSIST
-         failure if a socket error occurred while performing a
-         lookup.  This flaw is disclosed in CVE-2015-8461. [RT#40945]
+         Malformed control messages can trigger assertions in named
+         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
+         #41666]
        </para>
       </listitem>
       <listitem>
@@ -64,16 +62,18 @@
       </listitem>
       <listitem>
        <para>
-         Malformed control messages can trigger assertions in named
-         and rndc. This flaw is disclosed in CVE-2016-1285. [RT
-         #41666]
+         Incorrect reference counting could result in an INSIST
+         failure if a socket error occurred while performing a
+         lookup.  This flaw is disclosed in CVE-2015-8461. [RT#40945]
        </para>
       </listitem>
       <listitem>
        <para>
-         The resolver could abort with an assertion failure due to
-         improper DNAME handling when parsing fetch reply
-         messages. This flaw is disclosed in CVE-2016-1286. [RT #41753]
+         Insufficient testing when parsing a message allowed
+         records with an incorrect class to be be accepted,
+         triggering a REQUIRE failure when those records
+         were subsequently cached.  This flaw is disclosed
+         in CVE-2015-8000. [RT #40987]
        </para>
       </listitem>
     </itemizedlist>