backport r66689: imageop could segfault due to poor argument validation
diff --git a/Misc/NEWS b/Misc/NEWS
index a6ad102..dde30ae 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -190,6 +190,9 @@
 Extension Modules
 -----------------
 
+- Security Issue #2: imageop did not validate arguments correctly and could
+  segfault as a result.
+
 - Issue 3886: [CVE-2008-2316] Possible integer overflow in the _hashopenssl
   module was closed.