- Mention CVE-2009-3720 for change in r74429.

diff --git a/Misc/NEWS b/Misc/NEWS
index 8c41811f0039e0905e7f2bd1240388f17bc4e503..7501e874aec59ae0937d4ef739951ba804f111d6 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -1908,7 +1908,7 @@ Extension Modules
 - Issue #6848: Fix curses module build failure on OS X 10.6.
 
 - Fix a segfault in expat when given a specially crafted input lead to the
-  tokenizer not stopping.
+  tokenizer not stopping. CVE-2009-3720.
 
 - Issue #6561: '\d' in a regex now matches only characters with
   Unicode category 'Nd' (Number, Decimal Digit).  Previously it also