add CVE to J-PAKE issue

diff --git a/CHANGES b/CHANGES
index 1ec2697954025e26f4e81dc0a7bd22a774a2fd36..6c302f77875fdae5ecf29aafb3d036c979fd48b6 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -6,7 +6,7 @@
 
   *) Fixed J-PAKE implementation error, originally discovered by
      Sebastien Martini, further info and confirmation from Stefan
-     Arentz and Feng Hao. Note that this fix is a security fix.
+     Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252
      [Ben Laurie]
 
  Changes between 1.0.0a and 1.0.0b  [16 Nov 2010]