X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/99f106d1cfe06f6696d649bcb3533b44cfb4f562..9dd891bb28f6cc558b87905f1adc5e3d4180b6b3:/NEWS

diff --git a/NEWS b/NEWS
index 55ee031b..0d6b9c6d 100644
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,15 @@
 rsync 2.5.2 (???)
 
+  SECURITY FIXES:
+
+    * Signedness security patch from Sebastian Krahmer
+      <krahmer@suse.de> -- in some cases we were not sufficiently
+      careful about reading integers from the network.
+
   BUG FIXES:
 
+    * Fix possible string mangling in log files.
+
     * Fix for setting local address of outgoing sockets.
 
     * Better handling of hardlinks and devices on platforms with