1 files changed, 4 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 995c2cfd..d22baa65 100644
--- a/NEWS
+++ b/NEWS
@@ -19,6 +19,10 @@ Here is a history of user visible changes to Mailman.
     - Several cross-site scripting issues have been fixed.  Thanks to Moritz
       Naumann for their discovery.  CVE-2006-3636
 
+    - Fixed an unexploitable format string vulnerability.  Discovery and fix
+      by Karl Chen.  Analysis of non-exploitability by Martin 'Joey' Schulze.
+      Also thanks go to Lionel Elie Mamane.  CVE-2006-2191.
+
   Internationalization
 
     - New languages: Arabic, Vietnamese.