add CVE and issue number

diff --git a/Misc/NEWS b/Misc/NEWS
index 716d36a75e4499a6806bb5877d37179fb194691b..9ee1b897d0c8a1f6fa6f13d62553146f6122a6a5 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -1354,8 +1354,9 @@ Library
 - Issue #21349: Passing a memoryview to _winreg.SetValueEx now correctly raises
   a TypeError where it previously crashed the interpreter. Patch by Brian Kearns
 
-- Fix arbitrary memory access in JSONDecoder.raw_decode with a negative second
-  parameter. Bug reported by Guido Vranken.
+- Issue #21529 (CVE-2014-4616): Fix arbitrary memory access in
+  JSONDecoder.raw_decode with a negative second parameter. Bug reported by Guido
+  Vranken.
 
 - Issue #21172: isinstance check relaxed from dict to collections.Mapping.