summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorChristophe Fergeau <cfergeau@redhat.com>2015-10-06 17:08:50 +0200
committerChristophe Fergeau <cfergeau@redhat.com>2015-10-06 17:09:15 +0200
commitee1beff2ab0961066c71466a195430fb2473240d (patch)
treeaac5d4b46c663cbb62f3462ce6df3c77311a3564
parent6e3547f8b192f5b01d478ca222bf46736f5c700c (diff)
downloadspice-ee1beff2ab0961066c71466a195430fb2473240d.tar.gz
spice-ee1beff2ab0961066c71466a195430fb2473240d.tar.xz
spice-ee1beff2ab0961066c71466a195430fb2473240d.zip
Mention the 2 recently fixed CVEs in NEWS
-rw-r--r--NEWS2
1 files changed, 1 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index a6312e26..a33f6cf2 100644
--- a/NEWS
+++ b/NEWS
@@ -6,7 +6,7 @@ Major changes in 0.12.6:
* LZ4 support
* Let clients specify their preferred image compression format
* Allow to record and replay a spice-server session
-* Fix for CVE-2015-3247
+* Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
* spice-protocol submodule has been removed,, spice-protocol must now be
installed when building spice-server
* Remove write polling in chardevs to reduce wakeups