diff --git a/RELEASE.md b/RELEASE.md
index 88d85e8ace..b0de087869 100644
--- a/RELEASE.md
+++ b/RELEASE.md
@@ -139,6 +139,7 @@ For release candidates still update `CHANGELOG.md`, but when you cut the final r
 
 Entries in the `CHANGELOG.md` are meant to be in this order:
 
+* `[SECURITY]` - A bugfix that specifically fixes a security issue.
 * `[CHANGE]`
 * `[FEATURE]`
 * `[ENHANCEMENT]`