X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/06b91d8eb97dd7ba1fa8af3f58e5aee28d831b3f..e2dd78f7442ce404608fdad6e064d86386e81013:/NEWS

diff --git a/NEWS b/NEWS
index d5dd19da..b90a9c37 100644
--- a/NEWS
+++ b/NEWS
@@ -2,9 +2,11 @@ rsync 2.5.3 (not released yet)
 
   SECURITY FIXES:
 
+    * (CVE CAN-2002-0059)
+
     * Make sure that supplementary groups are removed from a server
       process after changing uid and gid. (Ethan Benson) (Debian bug
-      #132272)
+      #132272, CVE CAN-2002-0080)
 
   BUG FIXES: