Signedness security patch from Sebastian Krahmer <krahmer@suse.de> --

[rsync/rsync.git] / NEWS

diff --git a/NEWS b/NEWS
index 55ee031..0d6b9c6 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,15 @@
 rsync 2.5.2 (???)
 
+  SECURITY FIXES:
+
+    * Signedness security patch from Sebastian Krahmer
+      <krahmer@suse.de> -- in some cases we were not sufficiently
+      careful about reading integers from the network.
+
   BUG FIXES:
 
+    * Fix possible string mangling in log files.
+
     * Fix for setting local address of outgoing sockets.
 
     * Better handling of hardlinks and devices on platforms with