X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/2d6dbe290c1ccc52b550753c4f9240ac716d5a24..7d81641065fb40dadd6c02527998dba54cf1b3ca:/NEWS

diff --git a/NEWS b/NEWS
index ea11c8aa..7fcb24ef 100644
--- a/NEWS
+++ b/NEWS
@@ -1,19 +1,46 @@
-rsync 2.5.1 (sometime in 2001?)
+rsync 2.5.3 (not released yet)
+
+  SECURITY FIXES:
+
+    * (CVE CAN-2002-0059)
+
+    * Make sure that supplementary groups are removed from a server
+      process after changing uid and gid. (Ethan Benson) (Debian bug
+      #132272, CVE CAN-2002-0080)
+
+  BUG FIXES:
+
+    * Fixed problem that in many cases caused the error message 
+	unexpected read size of 0 in map_ptr
+      and resulted in the wrong data being copied.
+
+    * Fixed compilation errors on some systems caused by the use of
+      "unsigned int64" in rsync.h.
+
+    * Fixed problem on systems such as Sunos4 that do not support realloc
+      on a NULL pointer; error was "out of memory in flist_expand".
+
+    * Fix for rsync server processes hanging around after the client
+      unexpectedly disconnects.  (Colin Walters) (Debian bug #128632)
+
+    * Cope with BSD systems on which mkdir() will not accept a trailing
+      slash.
 
   ENHANCEMENTS:
 
-    * --progress and -P now show estimated data transfer rate (in a
-        multiple of bytes/s) and estimated time to completion.  Based
-        on a patch by Rik Faith.
+    * Merge in changes from zlib 1.1.2 to zlib 1.1.3.  (Note that
+      rsync still uses a custom version of zlib; you can not just link
+      against a system library.  See zlib/README.rsync)
 
-  BUG FIXES: 
-   
-    * Correct string<->address parsing for both IPv4 and 6.  Thankyou
-      to YOSHIFUJI Hideaki, SUMIKAWA Munechika and Jun-ichiro "itojun"
-      Hagino.
+    * Command to initiate connections is only shown with -vv, rather
+      than -v as in 2.5.2.  Output from plain -v is more similar to
+      what was historically used so as not to break scripts that try
+      to parse the output.
 
-    * rsync.1 typo fix by Matt Kraai.
+    * Added --no-whole-file and --no-blocking-io options (Dave Dykstra)
 
-    * Fix for segfault in rsyncd.conf parser by Paul Mackerras.
+    * Made the --write-batch and --read-batch options actually work
+      and added documentation in the man page (Jos Backus)
 
-    * Test suite typo fixes Tom Schmidt.
+    * If the daemon is unable to fork a child to accept a connection,
+      print an error message.  (Colin Walters)