diff --git a/NEWS b/NEWS
index ed3e04fd..70825db7 100644
--- a/NEWS
+++ b/NEWS
@@ -8,9 +8,9 @@ NEWS
   * Fix mod_compress to compile with old gcc version (#1592)
   * Fix mod_extforward to compile with old gcc version (#1591)
   * Update documentation for #1587
-  * Fix #285 again: read error after SSL_shutdown (thx marton.illes@balabit.com) and clear the error queue before some other calls
+  * Fix #285 again: read error after SSL_shutdown (thx marton.illes@balabit.com) and clear the error queue before some other calls (CVE-2008-1531)
   * Fix mod_magnet: enable "request.method" and "request.protocol" in lighty.env (#1308)
-  * Fix segfault for appending matched parts if there was no regex matching (just give empty strings) (#1601) (CVE-2008-1531)
+  * Fix segfault for appending matched parts if there was no regex matching (just give empty strings) (#1601)
 
 - 1.4.19 - 2008-03-10