Introduce --trust-server-names. Close CVE-2010-2252.

[wget] / NEWS

diff --git a/NEWS b/NEWS
index 899807e470b804a9caf0bfb7abe53dbd96eddea8..d4a98037f9d4f64b316e72d58f0a54e07846da28 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -33,6 +33,9 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 ** GNU TLS backend works again.
 
 ** Now --timestamping and --continue works well together.
+
+** By default, on server redirects, use the original URL to get the
+   local file name. Close CVE-2010-2252.
 \f
 * Changes in Wget 1.12