Fix a bug where Avahi does not verify the source of netlink messages

[catta] / docs / NEWS

diff --git a/docs/NEWS b/docs/NEWS
index 212d157c03e7226aaaaf6639947ef02b7aac9061..f6d04c629233eccb386bf90ac4ca95c1bec3f786 100644 (file)
--- a/docs/NEWS
+++ b/docs/NEWS
@@ -1,3 +1,15 @@
+Avahi 0.6.15
+============
+
+This is a bugfix release, this bug is potentially security sensitive
+
+ * Check that netlink messages actually originate from the kernel
+   and not another process.
+ * Fix build on NetBSD (thanks to Daniel S. Haischt)
+ * Fix dbus_service_browser not setting AVAHI_LOOKUP_RESULT_OUR_OWN.
+
+This release is backwards compatible with Avahi 0.6.x with x < 15.
+
 Avahi 0.6.14
 ============