diff --git a/docs/news.xml b/docs/news.xml
index caeda159a8..af57751e0c 100644
--- a/docs/news.xml
+++ b/docs/news.xml
@@ -157,6 +157,18 @@
       </change>
     </section>
     <section title="Bug fixes">
+      <change>
+        <summary>
+          qemu: TLS migration now enforces use of TLS for the NBD connection
+        </summary>
+        <description>
+          When the VIR_MIGRATE_TLS flag was used with the migration API libvirt
+          did not ensure that the NBD connection was using TLS as well. The code
+          now rejects such migration as the TLS transport for NBD is not ready
+          yet, but prevents a false sense of security that TLS would be used.
+          The support TLS for NBD will be added soon.
+        </description>
+      </change>
     </section>
   </release>
   <release version="v4.1.0" date="2018-03-05">