1 files changed, 4 insertions, 0 deletions
diff --git a/Misc/NEWS b/Misc/NEWS
index 7452b25..985d6c0 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -362,6 +362,10 @@ Extension Modules
 Library
 -------
 
+- [Security] bpo-29591: Update expat copy from 2.1.1 to 2.2.0 to get fixes
+  of CVE-2016-0718 and CVE-2016-4472. See
+  https://sourceforge.net/p/expat/bugs/537/ for more information.
+
 - bpo-24744: pkgutil.walk_packages function now raises ValueError if *path*
   is a string. Patch by Sanyam Khurana.