ChangeLog: Updated the changelog to reflect the last change.

[liboping.git] / ChangeLog

diff --git a/ChangeLog b/ChangeLog
index bd9a186..a7dfa47 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,14 @@
+2009-09-29, Version 1.3.3:
+       * oping: Disable the “-f” option if the real and effective user IDs
+         don't match. If that is the case the program is probably running
+         SetUID and should not read foreign files. Unfortunately, dropping
+         privileges before reading the file is not possible, because they are
+         required for opening raw sockets.
+
+         Reading from STDIN using “-f -” is still possible.
+
+         Thanks to Steve Kemp for reporting this issue as Debian bug #548684.
+
 2009-07-27, Version 1.3.2:
        * src/oping.h: Remove `HAVE_*_H' macros for system headers. Those
          macros should not be used in system wide installed header files.