[DMAAP-MR] Add sec note on log4j trans

Signed-off-by: efiacor <fiachra.corcoran@est.tech>
Change-Id: Iaf2e6ce4f2d68a338b50a02a6f706c347526d623
Issue-ID: DMAAP-1715
diff --git a/docs/release-notes/release-notes.rst b/docs/release-notes/release-notes.rst
index 9ca31fa..f318096 100644
--- a/docs/release-notes/release-notes.rst
+++ b/docs/release-notes/release-notes.rst
@@ -65,6 +65,11 @@
 
 Security Notes
 --------------
+Transitive dependency for log4j 1.2.17
+Sources:
+org.codehaus.groovy : groovy-eclipse-compiler : 2.8.0-01
+com.att.camel : att-camel-dme2-servlet : 2.16.2-oss
+org.apache.zookeeper : zookeeper : 3.7.0
 
 
 References