From ee1beff2ab0961066c71466a195430fb2473240d Mon Sep 17 00:00:00 2001 From: Christophe Fergeau Date: Tue, 6 Oct 2015 17:08:50 +0200 Subject: Mention the 2 recently fixed CVEs in NEWS --- NEWS | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index a6312e26..a33f6cf2 100644 --- a/NEWS +++ b/NEWS @@ -6,7 +6,7 @@ Major changes in 0.12.6: * LZ4 support * Let clients specify their preferred image compression format * Allow to record and replay a spice-server session -* Fix for CVE-2015-3247 +* Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261 * spice-protocol submodule has been removed,, spice-protocol must now be installed when building spice-server * Remove write polling in chardevs to reduce wakeups -- cgit