diff --git a/releasenotes/notes/12.0.3-cve-bugs-reno-561a450b346edf5e.yaml b/releasenotes/notes/12.0.3-cve-bugs-reno-561a450b346edf5e.yaml
new file mode 100644
index 000000000000..1eb582cd2a99
--- /dev/null
+++ b/releasenotes/notes/12.0.3-cve-bugs-reno-561a450b346edf5e.yaml
@@ -0,0 +1,7 @@
+---
+security:
+  - |
+    [OSSA 2016-007] Host data leak during resize/migrate for raw-backed instances  (CVE-2016-2140)
+
+    * `Bug 1548450 <https://bugs.launchpad.net/nova/+bug/1548450>`_
+    * `Announcement <http://lists.openstack.org/pipermail/openstack-announce/2016-March/001009.html>`__
\ No newline at end of file