Signedness security patch from Sebastian Krahmer <krahmer@suse.de> --

[rsync/rsync.git] / NEWS

diff --git a/NEWS b/NEWS
index ea11c8a..0d6b9c6 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,19 +1,26 @@
-rsync 2.5.1 (sometime in 2001?)
+rsync 2.5.2 (???)
 
-  ENHANCEMENTS:
+  SECURITY FIXES:
+
+    * Signedness security patch from Sebastian Krahmer
+      <krahmer@suse.de> -- in some cases we were not sufficiently
+      careful about reading integers from the network.
+
+  BUG FIXES:
 
-    * --progress and -P now show estimated data transfer rate (in a
-        multiple of bytes/s) and estimated time to completion.  Based
-        on a patch by Rik Faith.
+    * Fix possible string mangling in log files.
 
-  BUG FIXES: 
-   
-    * Correct string<->address parsing for both IPv4 and 6.  Thankyou
-      to YOSHIFUJI Hideaki, SUMIKAWA Munechika and Jun-ichiro "itojun"
-      Hagino.
+    * Fix for setting local address of outgoing sockets.
 
-    * rsync.1 typo fix by Matt Kraai.
+    * Better handling of hardlinks and devices on platforms with
+      64-bit dev_t or ino_t.
+
+  ENHANCEMENTS:
 
-    * Fix for segfault in rsyncd.conf parser by Paul Mackerras.
+    * --statistics now shows memory heap usage on platforms that
+        support mallinfo().
 
-    * Test suite typo fixes Tom Schmidt.
+    * "The Ted T'so school of program optimization": make progress
+      visible and people will think it's faster.  (With --progress,
+      rsync will show you how many files it has seen as it builds the
+      file_list, giving some indication that it has not hung.)