bpo-41304: Update NEWS to include CVE-2020-15801 reference (GH-21521)

(cherry picked from commit 164b04c47e61bd35d55e61bc74f9fd646eba81bb)

Co-authored-by: Steve Dower <steve.dower@python.org>
1 file changed