[2.7] bpo-34623: Mention CVE-2018-14647 in news entry (GH-9482) (GH-9490)

miss-islington · web-flow · commit 10be1d3f802b · 2018-09-21T21:57:00.000-07:00
https://bugs.python.org/issue34623 (cherry picked from commit 026337a) Co-authored-by: Christian Heimes <christian@python.org> https://bugs.python.org/issue34623
diff --git a/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst b/Misc/NEWS.d/next/Security/2018-09-10-16-05-39.bpo-34623.Ua9jMv.rst
@@ -1,2 +1,2 @@
-The C accelerated _elementtree module now initializes hash randomization
-salt from _Py_HashSecret instead of libexpat's default CSPRNG.
+CVE-2018-14647: The C accelerated _elementtree module now initializes hash
+randomization salt from _Py_HashSecret instead of libexpat's default CSPRNG.
