diff --git a/releases.yml b/releases.yml
index 4bc38e4c37..9413377642 100644
--- a/releases.yml
+++ b/releases.yml
@@ -17,6 +17,11 @@ releases:
           rpm: 143057
         release_jira: ART-11405
         upgrades: 4.14.16,4.14.17,4.14.18,4.14.19,4.14.20,4.14.21,4.14.22,4.14.23,4.14.24,4.14.25,4.14.26,4.14.27,4.14.28,4.14.29,4.14.30,4.14.31,4.14.32,4.14.33,4.14.34,4.14.35,4.14.36,4.14.37,4.14.38,4.14.39,4.14.40,4.14.41,4.15.0,4.15.2,4.15.3,4.15.5,4.15.6,4.15.7,4.15.8,4.15.9,4.15.10,4.15.11,4.15.12,4.15.13,4.15.14,4.15.15,4.15.16,4.15.17,4.15.18,4.15.19,4.15.20,4.15.21,4.15.22,4.15.23,4.15.24,4.15.25,4.15.26,4.15.27,4.15.28,4.15.29,4.15.30,4.15.31,4.15.32,4.15.33,4.15.34,4.15.35,4.15.36,4.15.37,4.15.38
+        dependencies:
+          rpms:
+          - el9: python-waitress-3.0.1-1.el9
+            why: "pin for CVE fix"
+            non_gc_tag: "rhaos-4.15-ironic-rhel-9"
       members:
         images: []
         rpms: []