diff --git a/RELNOTES b/RELNOTES
index 50ee3387..8708c35f 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -188,8 +188,8 @@ work on other platforms. Please report any problems and suggested fixes to
   Specifically, it detects if the caller passed a pointer and size pair
   that causes the pointer to integer-wrap past zero.
 
-- Fixed a fenceposting bug when a client had two host records configured,
-  one using 'uid' and the other using 'hardware ethernet'.
+! Fixed a fenceposting bug when a client had two host records configured,
+  one using 'uid' and the other using 'hardware ethernet'.  CVE-2009-1892
 
 - Fixed the check in the dhcp_interface_signal_handler routine to verify
   the existence of the linked signal handler before calling it.