diff --git a/NEWS b/NEWS
index c08b2f7d..c1870e89 100644
--- a/NEWS
+++ b/NEWS
@@ -11,8 +11,8 @@ XZ Utils Release Notes
 
     * liblzma:
 
-        - Fix a buffer overflow in lzma_index_append(): If
-          lzma_index_decoder() was used to decode an Index that
+        - Fix a buffer overflow in lzma_index_append() (CVE-2026-34743):
+          If lzma_index_decoder() was used to decode an Index that
           contained no Records, the resulting lzma_index was left in
           a state where where a subsequent lzma_index_append() would
           allocate too little memory, and a buffer overflow would occur.