diff --git a/doc/src/sgml/release-10.sgml b/doc/src/sgml/release-10.sgml
index b937d740c4f..577ad1a3c36 100644
--- a/doc/src/sgml/release-10.sgml
+++ b/doc/src/sgml/release-10.sgml
@@ -41,6 +41,49 @@
+
+ Confine additional operations within security restricted
+ operation
sandboxes (Sergey Shinderuk, Noah Misch)
+
+
+
+ Autovacuum, CLUSTER, CREATE
+ INDEX, REINDEX, REFRESH
+ MATERIALIZED VIEW,
+ and pg_amcheck activated
+ the security restricted operation
protection
+ mechanism too late, or even not at all in some code paths.
+ A user having permission to create non-temporary objects within a
+ database could define an object that would execute arbitrary SQL
+ code with superuser permissions the next time that autovacuum
+ processed the object, or that some superuser ran one of the affected
+ commands against it.
+
+
+
+ The PostgreSQL Project thanks
+ Alexander Lakhin for reporting this problem.
+ (CVE-2022-1552)
+
+
+
+
+
-
- Disallow infinite endpoints in the timestamp variants
- of generate_series() (Tom Lane)
-
-
-
- Previously, such a call would run until canceled (or
- out-of-disk-space). The numeric variant already threw an error for
- an infinite endpoint value, so do likewise for timestamps.
-
-
-
-
-
+
+ Avoid core dump in parser for a VALUES clause with
+ zero columns (Tom Lane)
+
+
+
+
+