add CVE to JPAKE fix

diff --git a/CHANGES b/CHANGES
index 2b096100bc5c375fb367ee267ca76cdfb920e9ed..00067bf14c6d878ab42ea1e712188876e5ee2087 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -6,7 +6,7 @@
 
   *) Fixed J-PAKE implementation error, originally discovered by
      Sebastien Martini, further info and confirmation from Stefan
-     Arentz and Feng Hao. Note that this fix is a security fix.
+     Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252
      [Ben Laurie]
 
  Changes between 0.9.8o and 0.9.8p [16 Nov 2010]