Issue #22928: Disabled HTTP header injections in httplib.
Original patch by Demian Brecht.
diff --git a/Misc/NEWS b/Misc/NEWS
index 8e97568..0be5fdb 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -21,6 +21,9 @@
 Library
 -------
 
+- Issue #22928: Disabled HTTP header injections in httplib.
+  Original patch by Demian Brecht.
+
 - Issue #23615: Module tarfile is now can be reloaded with imp.reload().
 
 - Issue #22853: Fixed a deadlock when use multiprocessing.Queue at import time.