X-Git-Url: https://git.octo.it/?a=blobdiff_plain;f=ChangeLog;h=85e9b523d2fda568d01841c56e778fe5f84e4dd0;hb=12fdba8ee84357b0123c867ecfa764f048fa0201;hp=bd9a186581a63638a569a46b552b691939059963;hpb=6cae8f1995b81ab3f7ec8a6411c2a3e0034166db;p=liboping.git

diff --git a/ChangeLog b/ChangeLog
index bd9a186..85e9b52 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,24 @@
+2009-12-20, Version 1.3.4:
+	* src/liboping.c: When one file descriptor was in an error state, the
+	  select(2) loop would run indefinitely. Error handling has been
+	  improved so the loop ends gracefully now in this case.
+	* src/liboping.c: Drop privileges before reading files if supported by
+	  the system. This way files are opened using the user's original
+	  privileges when using the “-f” option.
+	* Net::Oping: An off-by-one error has been fixed in the Perl bindings.
+	  Thanks to Fredrik Soderblom for his patch.
+
+2009-09-29, Version 1.3.3:
+	* oping: Disable the “-f” option if the real and effective user IDs
+	  don't match. If that is the case the program is probably running
+	  SetUID and should not read foreign files. Unfortunately, dropping
+	  privileges before reading the file is not possible, because they are
+	  required for opening raw sockets.
+
+	  Reading from STDIN using “-f -” is still possible.
+
+	  Thanks to Steve Kemp for reporting this issue as Debian bug #548684.
+
 2009-07-27, Version 1.3.2:
 	* src/oping.h: Remove `HAVE_*_H' macros for system headers. Those
 	  macros should not be used in system wide installed header files.