diff --git a/NEWS b/NEWS
index e02506792..1005e9375 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,8 @@ Changes in release 0.3e
 
  * rcp program included
 
+ * fix buffer overrun in ftpd
+
  * handle omitted sequence numbers as zeroes to handle MIT krb5 that
    cannot generate zero sequence numbers
 
diff --git a/appl/ftp/ChangeLog b/appl/ftp/ChangeLog
index f57243c92..58dd9f8f4 100644
--- a/appl/ftp/ChangeLog
+++ b/appl/ftp/ChangeLog
@@ -1,3 +1,8 @@
+2001-02-05  Assar Westerlund  <assar@sics.se>
+
+	* ftpd/popen.c (ftpd_popen): avoid overwriting the bounds of argv
+	and gargv
+
 2001-01-30  Assar Westerlund  <assar@sics.se>
 
 	* ftpd/gss_userok.c: use gss_krb5_copy_ccache