Last-minute updates for release notes.

Security: CVE-2016-0773

doc/src/sgml/release-9.1.sgml

@@ -34,6 +34,19 @@
 
    <itemizedlist>
 
+    <listitem>
+     <para>
+      Fix infinite loops and buffer-overrun problems in regular expressions
+      (Tom Lane)
+     </para>
+
+     <para>
+      Very large character ranges in bracket expressions could cause
+      infinite loops in some cases, and memory overwrites in other cases.
+      (CVE-2016-0773)
+     </para>
+    </listitem>
+
     <listitem>
      <para>
       Perform an immediate shutdown if the <filename>postmaster.pid</> file