[libpng16] Reference CVE-2017-12652 in CHANGES.
diff --git a/CHANGES b/CHANGES
index d67df82..3fdd8fd 100644
--- a/CHANGES
+++ b/CHANGES
@@ -5939,7 +5939,7 @@
 
 Version 1.6.32beta07 [August 3, 2017]
   Check length of all chunks except IDAT against user limit to fix an
-    OSS-fuzz issue.
+    OSS-fuzz issue (Fixes CVE-2017-12652).
 
 Version 1.6.32beta08 [August 3, 2017]
   Check length of IDAT against maximum possible IDAT size, accounting