X-Git-Url: https://git.octo.it/?a=blobdiff_plain;f=ChangeLog;h=a7dfa471833ecd230a0038b99b97cd74aed04bce;hb=0d959676fa18c7435a68f95544f7cff94cd05722;hp=cc349d714ba89df7278c460179b37d616430cde8;hpb=5d4a404569debf20033613ddb877d9dd4067c076;p=liboping.git

diff --git a/ChangeLog b/ChangeLog
index cc349d7..a7dfa47 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,24 @@
+2009-09-29, Version 1.3.3:
+	* oping: Disable the “-f” option if the real and effective user IDs
+	  don't match. If that is the case the program is probably running
+	  SetUID and should not read foreign files. Unfortunately, dropping
+	  privileges before reading the file is not possible, because they are
+	  required for opening raw sockets.
+
+	  Reading from STDIN using “-f -” is still possible.
+
+	  Thanks to Steve Kemp for reporting this issue as Debian bug #548684.
+
+2009-07-27, Version 1.3.2:
+	* src/oping.h: Remove `HAVE_*_H' macros for system headers. Those
+	  macros should not be used in system wide installed header files.
+	  Thanks to Sebastian for fixing this.
+
+2009-07-20, Version 1.3.1
+	* src/liboping.c: Fix too eager argument validation that prevented the
+	  library to work as documented. Thanks to Sebastian for catching this
+	  bug.
+
 2009-07-18, Version 1.3.0
 	* oping: Documentation and messages have been improved.
 	* oping: Support for the `-D' command line option has been added.