Mention CVE-2015-2331
diff --git a/NEWS b/NEWS
index 7c2e5b9..c337435 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,6 @@
 1.0beta1 [2014/12/02]
 
+* Fixed CVE-2015-2331.
 * I/O abstraction layer
 * Support setting last modification time for file.
 * zip_error_t