add release note entry

diff --git a/doc/arm/notes-sec-fixes.xml b/doc/arm/notes-sec-fixes.xml
index b3d0b6c529b75484af31c5d233b50209e476be35..1ad79bdf1e8a5346fbb01e32f2428c723268f99e 100644 (file)
--- a/doc/arm/notes-sec-fixes.xml
+++ b/doc/arm/notes-sec-fixes.xml
@@ -34,5 +34,13 @@
         This flaw is disclosed in CVE-2019-6471. [GL #942]
       </para>
     </listitem>
+    <listitem>
+      <para>
+       <command>named</command> could crash with an assertion failure
+       if a forwarder returned a referral, rather than resolving the
+       query, when QNAME minimization was enabled.  This flaw is
+       disclosed in CVE-2019-6476. [GL #1501]
+      </para>
+    </listitem>
   </itemizedlist>
 </section>