1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 7b3af113bf..d863d80f3a 100644
--- a/NEWS
+++ b/NEWS
@@ -107,6 +107,10 @@ Security related changes:
   in the assembly string/memory functions would cause a buffer overflow.
   Reported by H.J. Lu.
 
+  CVE-2016-10739: The getaddrinfo function could successfully parse IPv4
+  addresses with arbitrary trailing characters, potentially leading to data
+  or command injection issues in applications.
+
 The following bugs are resolved with this release:
 
   [The release manager will add the list generated by