diff --git a/release/doc/en_US.ISO8859-1/relnotes/article.sgml b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
index 35f65cc035c..040acffdeef 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/article.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/article.sgml
@@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
 
 	<programlisting>sendmail_enable="YES"</programlisting>
 
+	<para>The permissions for <application>sendmail</application>
+	  alias and map databases built via
+	  <filename>/etc/mail/Makefile</filename> now default to mode
+	  0640 to protect against a file locking local denial of service.
+	  It can be changed by setting the new
+	  <varname>SENDMAIL_MAP_PERMS</varname>
+	  <filename>make.conf</filename> option. &merged;</para>
+
+	<para>The permissions for the <application>sendmail</application>
+	  statistics file, <filename>/var/log/sendmail.st</filename>, have
+	  been changed from mode 0644 to mode 0640 to protect against
+	  a file locking local denial of service. &merged;</para>
+
       </sect4>
     </sect3>
 
diff --git a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
index 35f65cc035c..040acffdeef 100644
--- a/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
+++ b/release/doc/en_US.ISO8859-1/relnotes/common/new.sgml
@@ -3550,6 +3550,19 @@ options HZ=1000 # not compulsory but strongly recommended</programlisting>
 
 	<programlisting>sendmail_enable="YES"</programlisting>
 
+	<para>The permissions for <application>sendmail</application>
+	  alias and map databases built via
+	  <filename>/etc/mail/Makefile</filename> now default to mode
+	  0640 to protect against a file locking local denial of service.
+	  It can be changed by setting the new
+	  <varname>SENDMAIL_MAP_PERMS</varname>
+	  <filename>make.conf</filename> option. &merged;</para>
+
+	<para>The permissions for the <application>sendmail</application>
+	  statistics file, <filename>/var/log/sendmail.st</filename>, have
+	  been changed from mode 0644 to mode 0640 to protect against
+	  a file locking local denial of service. &merged;</para>
+
       </sect4>
     </sect3>