diff --git a/ChangeLog b/ChangeLog
index bd9a186581a63638a569a46b552b691939059963..85e9b523d2fda568d01841c56e778fe5f84e4dd0 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
+2009-12-20, Version 1.3.4:
+ * src/liboping.c: When one file descriptor was in an error state, the
+ select(2) loop would run indefinitely. Error handling has been
+ improved so the loop ends gracefully now in this case.
+ * src/liboping.c: Drop privileges before reading files if supported by
+ the system. This way files are opened using the user's original
+ privileges when using the “-f” option.
+ * Net::Oping: An off-by-one error has been fixed in the Perl bindings.
+ Thanks to Fredrik Soderblom for his patch.
+
+2009-09-29, Version 1.3.3:
+ * oping: Disable the “-f” option if the real and effective user IDs
+ don't match. If that is the case the program is probably running
+ SetUID and should not read foreign files. Unfortunately, dropping
+ privileges before reading the file is not possible, because they are
+ required for opening raw sockets.
+
+ Reading from STDIN using “-f -” is still possible.
+
+ Thanks to Steve Kemp for reporting this issue as Debian bug #548684.
+
2009-07-27, Version 1.3.2:
* src/oping.h: Remove `HAVE_*_H' macros for system headers. Those
macros should not be used in system wide installed header files.