diff --git a/CHANGES b/CHANGES
index 51cee69e51..bde665b3c3 100644
--- a/CHANGES
+++ b/CHANGES
@@ -1,5 +1,5 @@
 4467.	[security]	It was possible to trigger a assertion when rendering
-			a message. [RT #43139]
+			a message. (CVE-2016-2776) [RT #43139]
 
 4466.	[bug]		Interface scanning didn't work on a Windows system
 			without a non local IPv6 addresses. [RT #43130]