diff --git a/NEWS b/NEWS
index ae0e64fe..ed3e04fd 100644
--- a/NEWS
+++ b/NEWS
@@ -10,7 +10,7 @@ NEWS
   * Update documentation for #1587
   * Fix #285 again: read error after SSL_shutdown (thx marton.illes@balabit.com) and clear the error queue before some other calls
   * Fix mod_magnet: enable "request.method" and "request.protocol" in lighty.env (#1308)
-  * Fix segfault for appending matched parts if there was no regex matching (just give empty strings) (#1601)
+  * Fix segfault for appending matched parts if there was no regex matching (just give empty strings) (#1601) (CVE-2008-1531)
 
 - 1.4.19 - 2008-03-10