Set version to 2.5.3.

[rsync/rsync.git] / NEWS

diff --git a/NEWS b/NEWS
index ee00289..ea81bf8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,12 +1,18 @@
-rsync 2.5.3 (not released yet)
+rsync 2.5.3 (11 March 2002)
+
+  "Happy 26"
 
   SECURITY FIXES:
 
     * Make sure that supplementary groups are removed from a server
-      process after changing uid and gid. (Ethan Benson)
+      process after changing uid and gid. (Ethan Benson) (Debian bug
+      #132272, CVE CAN-2002-0080)
 
   BUG FIXES:
 
+    * Fix zlib double-free bug.  (Owen Taylor, Mark J Cox) (CVE
+      CAN-2002-0059)
+
     * Fixed problem that in many cases caused the error message 
        unexpected read size of 0 in map_ptr
       and resulted in the wrong data being copied.
@@ -20,8 +26,15 @@ rsync 2.5.3 (not released yet)
     * Fix for rsync server processes hanging around after the client
       unexpectedly disconnects.  (Colin Walters) (Debian bug #128632)
 
+    * Cope with BSD systems on which mkdir() will not accept a trailing
+      slash.
+
   ENHANCEMENTS:
 
+    * Merge in changes from zlib 1.1.2 to zlib 1.1.3.  (Note that
+      rsync still uses a custom version of zlib; you can not just link
+      against a system library.  See zlib/README.rsync)
+
     * Command to initiate connections is only shown with -vv, rather
       than -v as in 2.5.2.  Output from plain -v is more similar to
       what was historically used so as not to break scripts that try
@@ -30,4 +43,7 @@ rsync 2.5.3 (not released yet)
     * Added --no-whole-file and --no-blocking-io options (Dave Dykstra)
 
     * Made the --write-batch and --read-batch options actually work
-       and added documentation in the man page (Jos Backus)
+      and added documentation in the man page (Jos Backus)
+
+    * If the daemon is unable to fork a child to accept a connection,
+      print an error message.  (Colin Walters)