[DCAE] Istanbul maintenance - include note on transitive dependency

Change-Id: I6b058bf2ff62f0d95299f1a39d50e5740afb7fe7
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>
Issue-ID: DCAEGEN2-3102
Issue-ID: DCAEGEN2-3105
Signed-off-by: Vijay Venkatesh Kumar <vv770d@att.com>

diff --git a/docs/sections/release-notes.rst b/docs/sections/release-notes.rst
index f2bf4a8..05eb786 100644 (file)
--- a/docs/sections/release-notes.rst
+++ b/docs/sections/release-notes.rst
@@ -67,6 +67,14 @@ None
 
 None
 
+Security Notes
+--------------
+
+*Known Vulnerabilities in Used Modules*
+
+    dcaegne2/services/mapper includes transitive dependency on log4j 1.2.17; this will be addressed in later release (DCAEGEN2-3105)
+
+
 Istanbul Maintenance Rls Deliverables
 -------------------------------------