From 973261c0b805075ab8e250034bfd72916541f6d3 Mon Sep 17 00:00:00 2001
From: Dave Beckett <dave@dajobe.org>
Date: Sun, 19 Sep 2021 17:08:13 -0700
Subject: Document CVE-2017-18926 fix commit

---
 NEWS.html    | 1 +
 RELEASE.html | 3 +++
 2 files changed, 4 insertions(+)

diff --git a/NEWS.html b/NEWS.html
index e6176115..3430fbb1 100644
--- a/NEWS.html
+++ b/NEWS.html
@@ -14,6 +14,7 @@
 </p>
 
 <p>
+Fixes <a href="https://nvd.nist.gov/vuln/detail/CVE-2017-18926">CVE-2017-18926</a><br />
 Multiple Appveyor Windows and CMake build fixes by <a href="https://github.com/0u812">0u812</a>. (Note: the resulting binaries and libraries were not tested on Windows)<br />
 Turtle parser now reads input in chunks so can handle huge files. Patch by Sebastian Freundt<br />
 Added a serializer for the <a href="http://contextknowledgesystems.org/CKS.html">mKR</a> language.  Patch by Richard H. McCullough.<br />
diff --git a/RELEASE.html b/RELEASE.html
index a7e595d8..c6013555 100644
--- a/RELEASE.html
+++ b/RELEASE.html
@@ -14,6 +14,9 @@
 <p>Not yet released.
 </p>
 
+<p><a href="https://nvd.nist.gov/vuln/detail/CVE-2017-18926">CVE-2017-18926</a>
+fixed in commit 590681e546cd9aa18d57dc2ea1858cb734a3863f</p>
+
 <h3>Parser changes</h3>
 
 <p>The Turtle parser was improved to process input in chunks, rather
-- 
cgit v1.2.1