Fix typo in CVE ID

diff --git a/NEWS b/NEWS
index d5c78beff189db28a34b8a3aaced348467a6097f..85cb7785274ff62a6c15677e42f8a5b5768b0e93 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -114,7 +114,7 @@ Version 2.20
   over a decade, and the removal is prompted by security defects.  The
   normal gconv conversion modules are still supported.  Transliteration
   with //TRANSLIT is still possible, and the //IGNORE specifier
-  continues to be  supported. (CVE-2014-5519)
+  continues to be  supported. (CVE-2014-5119)
 \f
 Version 2.19