diff --git a/doc/arm/notes.xml b/doc/arm/notes.xml
index c4b4d074e1..200eb43df5 100644
--- a/doc/arm/notes.xml
+++ b/doc/arm/notes.xml
@@ -68,7 +68,11 @@
     <itemizedlist>
       <listitem>
 	<para>
-	  None.
+	 getrrsetbyname with a non absolute name could trigger a
+	 infinite recursion bug in lwresd and named with lwres
+	 configured if when combined with a search list entry the
+	 resulting name is too long.  This issue is disclosed in
+	 CVE-2016-XXXX.
 	</para>
       </listitem>
     </itemizedlist>