diff --git a/Misc/NEWS b/Misc/NEWS
index 709d5be..ed05758 100644
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -42,6 +42,20 @@
   on Windows.
 
 
+What's New in Python 2.7.3 release candidate 2?
+===============================================
+
+*Release date: 2012-03-XX*
+
+Library
+-------
+
+- Issue #14234: CVE-2012-0876: Randomize hashes of xml attributes in the hash
+  table internal to the pyexpat module's copy of the expat library to avoid a
+  denial of service due to hash collisions.  Patch by David Malcolm with some
+  modifications by the expat project.
+
+
 What's New in Python 2.7.3 release candidate 1?
 ===============================================