diff --git a/docs/release-notes.d/bootutil-check-tlv.md b/docs/release-notes.d/bootutil-check-tlv.md
new file mode 100644
index 000000000..1cfdb9876
--- /dev/null
+++ b/docs/release-notes.d/bootutil-check-tlv.md
@@ -0,0 +1,2 @@
+- Enforce that TLV entries that should be protected are.
+  This can be disabled by defining `ALLOW_ROGUE_TLVS`