remove rc4 from the default client ciphers (closes #23481)
diff --git a/Misc/NEWS b/Misc/NEWS
index 5f9c814..2f171c2 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -21,6 +21,8 @@
 - Issue #22885: Fixed arbitrary code execution vulnerability in the dumbdbm
   module.  Original patch by Claudiu Popa.
 
+- Issue #23481: Remove RC4 from the SSL module's default cipher list.
+
 - Issue #21849: Fixed xmlrpclib serialization of non-ASCII unicode strings in
   the multiprocessing module.