1 files changed, 15 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index b021f309..e4cf8e60 100755
--- a/NEWS
+++ b/NEWS
@@ -5,7 +5,15 @@ Copyright (C) 1998-2015 by the Free Software Foundation, Inc.
 
 Here is a history of user visible changes to Mailman.
 
-2.1.20 (xx-xxx-xxxx)
+2.1.20 (31-Mar-2015)
+
+  Security
+
+    - A path traversal vulnerability has been discovered and fixed.  This
+      vulnerability is only exploitable by a local user on a Mailman server
+      where the suggested Exim transport, the Postfix postfix_to_mailman.py
+      transport or some other programmatic MTA delivery not using aliases
+      is employed.  CVE-2015-2775  (LP: #1437145)
 
   New Features
 
@@ -14,6 +22,12 @@ Here is a history of user visible changes to Mailman.
       address in one step rather than adding the new address, copying settings
       and deleting the old address.  (LP: #266809)
 
+  i18n
+ 
+    - The Russian translation has been updated by Danil Smirnov.
+
+    - The Polish translation has been updated by Stefan Plewako.
+ 
   Bug fixes and other patches
 
     - A LookupError in SpamDetect on a message with RFC 2047 encoded headers