diff --git a/news/2012-bugfix.md b/news/2012-bugfix.md
new file mode 100644
index 000000000..3c870e658
--- /dev/null
+++ b/news/2012-bugfix.md
@@ -0,0 +1 @@
+Add dependency on System.Private.Uri to resolve CVE