diff --git a/shield/docs/public/release-notes.asciidoc b/shield/docs/public/release-notes.asciidoc
index c8cc3e05c00..a4a05d8c83c 100644
--- a/shield/docs/public/release-notes.asciidoc
+++ b/shield/docs/public/release-notes.asciidoc
@@ -43,6 +43,13 @@ version of Shield. We recommend copying the changes listed below to your `roles.
 [[changelist]]
 === Change List
 
+[float]
+==== 1.3.1
+
+* Fixes <<enable-message-authentication,message authentication>> serialization to work with Shield 1.2.1 and earlier.
+** NOTE: if you are upgrading from Shield 1.3.0 or Shield 1.2.2 a {ref}/setup-upgrade.html#restart-upgrade[cluster restart upgrade]
+will be necessary. When upgrading from other versions of Shield, follow the normal <<upgrade-instructions,upgrade procedure>>.
+
 [float]
 ==== 1.3.0
 
@@ -71,6 +78,13 @@ version of Shield. We recommend copying the changes listed below to your `roles.
   environment files `/etc/sysconfig/elasticsearch` and `/etc/default/elasticsearch`.
 * Default ciphers no longer include `TLS_DHE_RSA_WITH_AES_128_CBC_SHA`.
 
+[float]
+==== 1.2.3
+
+* Fixes <<enable-message-authentication,message authentication>> serialization to work with Shield 1.2.1 and earlier.
+** NOTE: if you are upgrading from Shield 1.2.2 a {ref}/setup-upgrade.html#restart-upgrade[cluster restart upgrade]
+will be necessary. When upgrading from other versions of Shield, follow the normal <<upgrade-instructions,upgrade procedure>>.
+
 [float]
 ==== 1.2.2