X-Git-Url: http://sjero.net/git/?p=wget;a=blobdiff_plain;f=NEWS;h=87bd21c07e55e3e242bb39bf4722e1332f548013;hp=df2c7742bd3881e606b98c8f3f7221ba2726bbec;hb=88253c0d00fc138e0aad0a2ec3f9886a0cd9ca07;hpb=c784c334d3ddaeb6c628931eca87056e152181fe

diff --git a/NEWS b/NEWS
index df2c7742..87bd21c0 100644
--- a/NEWS
+++ b/NEWS
@@ -10,6 +10,10 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 
 ** Mailing list MOVED to bug-wget@gnu.org
 
+** SECURITY FIX: It had been possible to trick Wget into accepting
+SSL certificates that don't match the host name, through the trick of
+embedding NUL characters into the certs' common name.
+
 ** Added support for CSS. This includes:
      - Parsing links from CSS files, and from CSS content found in HTML
        style tags and attributes.
@@ -41,6 +45,9 @@ an external file.
 information on how it was built, and the set of configure-time options
 that were selected.
 
+** --html-extension has been renamed to --adjust-extension, to reflect
+the fact that it now also applies to CSS content..
+
 ** An "ascii" specifier is now accepted by --restrict-file-names, which
 forces the percent-encoding of all non-ASCII bytes