diff --git a/CHANGES b/CHANGES
index 2b096100b..00067bf14 100644
--- a/CHANGES
+++ b/CHANGES
@@ -6,7 +6,7 @@
 
   *) Fixed J-PAKE implementation error, originally discovered by
      Sebastien Martini, further info and confirmation from Stefan
-     Arentz and Feng Hao. Note that this fix is a security fix.
+     Arentz and Feng Hao. Note that this fix is a security fix. CVE-2010-4252
      [Ben Laurie]
 
  Changes between 0.9.8o and 0.9.8p [16 Nov 2010]