Reference CVE-2020-35512 in NEWS

Signed-off-by: Simon McVittie <smcv@collabora.com>

diff --git a/NEWS b/NEWS
index 2fca145..15a6427 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -13,7 +13,7 @@ Maybe security fixes:
   between users of different names with the same numeric uid, so this
   configuration is not advisable on systems where D-Bus will be used.
   Thanks to Daniel Onaca.
-  (dbus#305, dbus!166; Simon McVittie)
+  (dbus#305, dbus!166, CVE-2020-35512; Simon McVittie)
 
 Other fixes: