X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/6b1ef85dd8c4a5d5ba2053b42c5a1b44f22ba5e7..43a4dc1053bd3bfec67f3cc6a6fa4edc1f394a82:/NEWS diff --git a/NEWS b/NEWS index d371b340..668d915b 100644 --- a/NEWS +++ b/NEWS @@ -1,29 +1,16 @@ -rsync 2.5.2 (???) +rsync 2.5.4 (12 March 2002) - SECURITY FIXES: - - * Signedness security patch from Sebastian Krahmer - -- in some cases we were not sufficiently - careful about reading integers from the network. + "Imitation lizard skin" BUG FIXES: - * Fix possible string mangling in log files. - - * Fix for setting local address of outgoing sockets. - - * Better handling of hardlinks and devices on platforms with - 64-bit dev_t or ino_t. - + * Additional fix for zlib double-free bug. (Martin Pool, Andrew + Tridgell) (CVE CAN-2002-0059) + ENHANCEMENTS: - * --statistics now shows memory heap usage on platforms that - support mallinfo(). - - * "The Ted T'so school of program optimization": make progress - visible and people will think it's faster. (With --progress, - rsync will show you how many files it has seen as it builds the - file_list, giving some indication that it has not hung.) + * Merge in changes from zlib 1.1.3 to zlib 1.1.4. (Jos Backus) + (Note that rsync still uses a custom version of zlib; you can + not just link against a system library. See zlib/README.rsync) - * Improvements to batch mode support. This is still experimental - but testing would be welcome. (Jos Backus) + * Additional test cases for --compress. (Martin Pool)