Improve security release notes

In order to provide users with more details of project's state in
terms of security let's divide the security release notes into three
sections:

- Fixed Security Issues
  Contains a list of security fixes merged during this
  release (especially those reported via OJSI tickets).

- Known Security Issues
  Contains a list of vulnerabilities detected in project during
  release which have not been fixed yet and thus should be mitigated
  by the user.

- Known Vulnerabilities in Used Modules
  Contains information about NexusIQ scan results

Issue-ID: SECCOM-238
Signed-off-by: Krzysztof Opasiak <k.opasiak@samsung.com>
Change-Id: I87465c5cf35c1b868c8b1aed0978ee0315cee717

diff --git a/docs/release_notes.rst b/docs/release_notes.rst
index cb8295b..c77ff9e 100644 (file)
--- a/docs/release_notes.rst
+++ b/docs/release_notes.rst
@@ -18,6 +18,14 @@ The Dublin Release does not have any major updates to the Secret Management Serv
 
        - No new fixes were implemented for this release
 
+**Security Notes**
+
+*Fixed Security Issues*
+
+*Known Security Issues*
+
+*Known Vulnerabilities in Used Modules*
+
 **Upgrade Notes**
 
     Use the 4.0.0 image for SMS