diff --git a/NEWS b/NEWS
index 6d9e92b95..3e6f801e7 100644
--- a/NEWS
+++ b/NEWS
@@ -20,7 +20,7 @@ Noteworthy changes in version 2.0.9 (2008-03-26)
  * Fixed a bug in the ambigious name detection.
 
  * Fixed possible memory corruption while importing OpenPGP keys (bug
-   introduced with 2.0.8).
+   introduced with 2.0.8). [CVE-2008-1530]
 
  * Minor bug fixes.