1 files changed, 2 insertions, 0 deletions
diff --git a/NEWS b/NEWS
index 2b69f00..0ab7730 100644
--- a/NEWS
+++ b/NEWS
@@ -12,6 +12,8 @@ New in release 1.4 (2012-XX-XX):
 * Security updates
   - CVE-2012-3422, RH840592: Potential read from an uninitialized memory location
   - CVE-2012-3423, RH841345: Incorrect handling of not 0-terminated strings
+* Common
+  - PR1049: Extension jnlp's signed jar with the content of only META-INF/* is considered unsigned
 
 New in release 1.3 (2012-XX-XX):
 * NetX