Backport of r74429. Not merged/blocked as svnmerge.py is giving me an error and
I don't want to accidentally check in busted svnmerge metadata.
diff --git a/Misc/NEWS b/Misc/NEWS
index a4b3073..20692a0 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -163,6 +163,8 @@
 Extension Modules
 -----------------
 
+- Fix expat to not segfault with specially crafted input.
+
 - Issue #4873: Fix resource leaks in error cases of pwd and grp.
 
 Build