* etc/NEWS: Update for Emacs 29.3

diff --git a/etc/NEWS b/etc/NEWS
index 06086e9bdfb31fa87681886bd2c90b5962951165..3f94b0d46348b75a3c0e03e339acb4b4d5c5de4b 100644 (file)
--- a/etc/NEWS
+++ b/etc/NEWS
@@ -15,32 +15,28 @@ in older Emacs versions.
 You can narrow news to a specific version by calling 'view-emacs-news'
 with a prefix argument or by typing 'C-u C-h C-n'.
 
-\f
-* Installation Changes in Emacs 29.3
-
-\f
-* Startup Changes in Emacs 29.3
-
 \f
 * Changes in Emacs 29.3
+Emacs 29.3 is an emergency bugfix release intended to fix several
+security vulnerabilities described below.
 
-\f
-* Editing Changes in Emacs 29.3
+** Arbitrary Lisp code is no longer evaluated as part of turning on Org mode.
+This is for security reasons, to avoid evaluating malicious Lisp code.
 
-\f
-* Changes in Specialized Modes and Packages in Emacs 29.3
+** New buffer-local variable 'untrusted-content'.
+When this is non-nil, Lisp programs should treat buffer contents with
+extra caution.
 
-\f
-* New Modes and Packages in Emacs 29.3
+** Gnus now treats inline MIME contents as untrusted.
+To get back previous insecure behavior, 'untrusted-content' should be
+reset to nil in the buffer.
 
-\f
-* Incompatible Lisp Changes in Emacs 29.3
+** LaTeX preview is now by default disabled for email attachments.
+To get back previous insecure behavior, set the variable
+'org--latex-preview-when-risky' to a non-nil value.
 
-\f
-* Lisp Changes in Emacs 29.3
-
-\f
-* Changes in Emacs 29.3 on Non-Free Operating Systems
+** Org mode now considers contents of remote files to be untrusted.
+Remote files are recognized by calling 'file-remote-p'.
 
 \f
 * Installation Changes in Emacs 29.2