add CVE-2016-2776

(cherry picked from commit 9872e3fbd992dbbcec3e0377adef18ceb99f18f0)

diff --git a/CHANGES b/CHANGES
index c70461071fe1a7866e8a89c82332d362cb62394f..2526ed3b64635ef3161a33a61e30acc98b2bdfdf 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,5 @@
 4467.  [security]      It was possible to trigger a assertion when rendering
-                       a message. [RT #43139]
+                       a message. (CVE-2016-2776) [RT #43139]
 
        --- 9.9.9-P2 released ---