add CVE-2016-2776

(cherry picked from commit 9872e3fbd992dbbcec3e0377adef18ceb99f18f0)

diff --git a/CHANGES b/CHANGES
index 51cee69e5148619b370572babc54c400fb5ae7f3..bde665b3c3d655ed7aa1cd853f129cd2d3fd7579 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,5 @@
 4467.  [security]      It was possible to trigger a assertion when rendering
-                       a message. [RT #43139]
+                       a message. (CVE-2016-2776) [RT #43139]
 
 4466.  [bug]           Interface scanning didn't work on a Windows system
                        without a non local IPv6 addresses. [RT #43130]