* Update NEWS for 0.6.16

[catta] / docs / NEWS

diff --git a/docs/NEWS b/docs/NEWS
index fe561a5d4f80a702913080c619506e5a4c2d1042..fd37d42e50d200ae09da16a0cb1d1e95e20ef86d 100644 (file)
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -1,3 +1,40 @@
+Avahi 0.6.16
+============
+
+This is a bugfix release, it fixes one DoS (100% CPU Usage) and a regression
+from the last release
+
+ * Revert previous patch to check nlmsg_pid as it is bogus and breaks in
+   many cases, notably when using NetworkManager (Closes: #72)
+ * Replace with new SO_PASSCRED-based check of the sending UID, which
+   seems to work better (Closes: #72)
+ * Handle some errors in libdns_sd more gracefully the way the real
+   libdns_sd does (Closes: #64)
+ * Apply fix for Linux 2.6.19+ where IFA_RTA / IFLA_RTA is no longer
+   defined (Closes: #86)
+ * Fix doxygen comments for avahi watch, thanks to tedp (Closes: #77)
+ * Make d-bus version detection work for >= 1.0 (Closes: #71)
+ * Dont dbus_connection_close on shared dbus connections (Closes: #68)
+ * Fix potential endless loop in dns label unpacking code (Closes: #84)
+ * Fix bogus assertion in client-publish-service.c example
+ * Mild fix to some doxygen docs for avahi-common/address.h
+ * Fix passing in custom priviledged group (previously ignored setting)
+   (Closes: #85) 
+
+This release is backwards compatible with Avahi 0.6.x with x < 16.
+
+Avahi 0.6.15
+============
+
+This is a bugfix release, this bug is potentially security sensitive
+
+ * Check that netlink messages actually originate from the kernel
+   and not another process.
+ * Fix build on NetBSD (thanks to Daniel S. Haischt)
+ * Fix dbus_service_browser not setting AVAHI_LOOKUP_RESULT_OUR_OWN.
+
+This release is backwards compatible with Avahi 0.6.x with x < 15.
+
 Avahi 0.6.14
 ============
 
@@ -6,15 +43,17 @@ This release fixes some bugs and includes a new component.
 Changes:
 
   * Add new daemon "avahi-autoipd" which is an implementation of
-    IPv4LL as defined in RFC3927. While it is not the first
-    implemenatation of this technology for Free operating systems it
-    is clearly the most powerful and hopefully even the most
-    secure. (Because it chroot()s and drops priviliges and suchlike)
-    For more information, especially about packaging this new tool for
-    distributions, please make sure to read:
+    IPv4LL as defined in RFC3927, a technology for assigning link-local IP
+    addresses without DHCP server. The same functionality has been available on
+    Windows under the name APIPA. While it is not the first implemenatation of
+    this technology for Free operating systems it is clearly the most powerful
+    and hopefully even the most secure. (Because it chroot()s and drops
+    priviliges and suchlike) For more information, especially about packaging
+    this new tool for distributions, please make sure to read:
     http://avahi.org/wiki/AvahiAutoipd 
-    For the rationale for adding this program to the Avahi toolset
-    please read this mailing list thread:
+    and of course the man page included in the tarball.  For the rationale for
+    adding this program to the Avahi toolset please read this mailing list
+    thread:
     http://lists.freedesktop.org/archives/avahi/2006-September/000863.html
   * Fix a segfault in the code handling static host name registrations
   * Add a few new entries to the service type database