document

diff --git a/docs/NEWS b/docs/NEWS
index bd5ea34e91e424e9e0aed5f452589652c5c8d228..58d486cac5cbb3adadf255b5d51651927e395f2a 100644 (file)
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -3,6 +3,12 @@
 Version 1.0 ()
 ------------------------------------------------------------------------
 
+   * Saving special crafterd configuration data as Admin superuser 
+     could lead to arbitrary PHP code inclusion from 
+     serendipity_config_local.inc.php. Since admins usually already have
+     superuser rights over their files, this is not considered a
+     "real-life" security issue. (garvinhicking)
+
    * Added Pivot importer (garvinhicking)
 
    * The spamblock plugin now continues to check any comment/trackback