diff --git a/doc/news/version_6.20170818.mdwn b/doc/news/version_6.20170818.mdwn
index 26bc7c1a26..09cb8172a3 100644
--- a/doc/news/version_6.20170818.mdwn
+++ b/doc/news/version_6.20170818.mdwn
@@ -1,3 +1,7 @@
+**Note** this is a security fix release. While the security
+hole needs perhaps some social engineering to exploit, a prompt upgrade is
+strongly recommended.
+
 git-annex 6.20170818 released with [[!toggle text="these changes"]]
 [[!toggleable text="""
    * Security fix: Disallow hostname starting with a dash, which
@@ -39,4 +43,4 @@ git-annex 6.20170818 released with [[!toggle text="these changes"]]
    * Fix the external special remotes git-annex-remote-ipfs,
      git-annex-remote-torrent and the example.sh template to correctly
      support filenames with spaces.
-   * Windows: Win32 package has subsumed Win32-extras; update dependency."""]]
\ No newline at end of file
+   * Windows: Win32 package has subsumed Win32-extras; update dependency."""]]