X-Git-Url: http://sjero.net/git/?p=wget;a=blobdiff_plain;f=NEWS;h=d4a98037f9d4f64b316e72d58f0a54e07846da28;hp=899807e470b804a9caf0bfb7abe53dbd96eddea8;hb=3e25a9817f47fbb8660cc6a3b2f3eea239526c6c;hpb=a3eafcf1372c2269695ff57da45bd0c8da852480

diff --git a/NEWS b/NEWS
index 899807e4..d4a98037 100644
--- a/NEWS
+++ b/NEWS
@@ -33,6 +33,9 @@ Please send GNU Wget bug reports to <bug-wget@gnu.org>.
 ** GNU TLS backend works again.
 
 ** Now --timestamping and --continue works well together.
+
+** By default, on server redirects, use the original URL to get the
+   local file name. Close CVE-2010-2252.
 
 * Changes in Wget 1.12