X-Git-Url: http://sjero.net/git/?p=wget;a=blobdiff_plain;f=NEWS;h=4f2c3cae8e2bee7a33c170a30f9899f8123814fd;hp=899807e470b804a9caf0bfb7abe53dbd96eddea8;hb=7ae38d431e08a747b06935822f25f0acc24c14d9;hpb=b7f54921f6618df7750c07ff8807b9f4b0baff06

diff --git a/NEWS b/NEWS
index 899807e4..4f2c3cae 100644
--- a/NEWS
+++ b/NEWS
@@ -33,6 +33,19 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 ** GNU TLS backend works again.
 
 ** Now --timestamping and --continue works well together.
+
+** By default, on server redirects, use the original URL to get the
+   local file name. Close CVE-2010-2252.  This introduces a
+   backward-incompatibility; any script that relies on the old
+   behaviour must use --trust-server-names.
+
+** Fix a problem when -k is used and some URLs are specified trough
+   CSS.
+
+** Convert correctly URLs that need to be encoded to local files when following
+   links.
+
+** Use persistent connections with proxies supporting them.
 
 * Changes in Wget 1.12