zlib-1.1.4 news.

diff --git a/Misc/NEWS b/Misc/NEWS
index 14964e200626b204ff5f7b0e1e31c2f2a0a33083..d88c26606fe5d411686235cc47357de797eec7af 100644 (file)
--- a/Misc/NEWS
+++ b/Misc/NEWS
@@ -8,6 +8,13 @@ Core and builtins
   that have an attribute print_file_and_line, not just SyntaxErrors. This
   fixes the bug that no proper line number is given for bad \x escapes.
 
+Extension modules
+
+- A security hole ("double free") was found in zlib-1.1.3, a popular
+  third party compression library used by some Python modules.  The
+  hole was quickly plugged in zlib-1.1.4, and the Windows build of
+  Python 2.2.1 now ships with zlib-1.1.4.
+
 Library
 
 - webbrowser: tightened up the command passed to os.system() so that