From: msweet <msweet@a1ca3aef-8c08-0410-bb20-df032aa958be>
Date: Thu, 3 Jul 2014 14:38:26 +0000 (+0000)
Subject: Changelog.
X-Git-Tag: v2.2b1~579
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=abdd2bb172dd462352af7247a00e9a31abbae48c;p=thirdparty%2Fcups.git

Changelog.


git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11994 a1ca3aef-8c08-0410-bb20-df032aa958be
---

diff --git a/CHANGES-1.7.txt b/CHANGES-1.7.txt
index 6d04c2ee7c..bed259f6ee 100644
--- a/CHANGES-1.7.txt
+++ b/CHANGES-1.7.txt
@@ -3,6 +3,9 @@ CHANGES-1.7.txt
 
 CHANGES IN CUPS V1.7.4
 
+	- Security: The web interface incorrectly served symlinked files and
+	  files that were not world-readable, potentially leading to a
+	  disclosure of information (STR #4450)
 	- The CUPS headers incorrectly needed libdispatch for blocks support
 	  (STR #4397)
 	- CUPS did not compile when Avahi or mDNSResponder was not present