diff --git a/docs/index.rst b/docs/index.rst
index b179068f4..cde3ae699 100644
--- a/docs/index.rst
+++ b/docs/index.rst
@@ -69,4 +69,5 @@ General
 .. toctree::
    :maxdepth: 1
 
+   releases/index
    license
diff --git a/docs/releases/4.0.1.rst b/docs/releases/4.0.1.rst
new file mode 100644
index 000000000..4549ffbb3
--- /dev/null
+++ b/docs/releases/4.0.1.rst
@@ -0,0 +1,17 @@
+============================
+Release notes for IRRd 4.0.1
+============================
+
+IRRd 4.0.1 fixes a `bug in object deletion`_ and upgrades
+the twisted version to 19.2.1 to ensure CVE-2019-12387 is
+fixed.
+
+The bug in object deletion prevented the deletion of
+objects with no inbound references, such as certain route
+objects. CVE-2019-12387 likely did not affect IRRd, as it
+affected components of twisted that are not directly used
+in IRRd, but upgrading is recommended to be sure.
+
+IRRd 4.0.1 is entirely backwards compatible with 4.0.0.
+
+.. _bug in object deletion: https://github.com/irrdnet/irrd4/issues/228
diff --git a/docs/releases/index.rst b/docs/releases/index.rst
new file mode 100644
index 000000000..ff695d13c
--- /dev/null
+++ b/docs/releases/index.rst
@@ -0,0 +1,7 @@
+Release notes
+=============
+
+.. toctree::
+   :maxdepth: 1
+
+   4.0.1