Changelog.

git-svn-id: svn+ssh://src.apple.com/svn/cups/cups.org/trunk@11994 a1ca3aef-8c08-0410-bb20-df032aa958be

diff --git a/CHANGES-1.7.txt b/CHANGES-1.7.txt
index 6d04c2ee7c0be777529b7950960049690fecc3cf..bed259f6ee6f80df37ab9bac4cba3903db836e57 100644 (file)
--- a/CHANGES-1.7.txt
+++ b/CHANGES-1.7.txt
@@ -3,6 +3,9 @@ CHANGES-1.7.txt
 
 CHANGES IN CUPS V1.7.4
 
+       - Security: The web interface incorrectly served symlinked files and
+         files that were not world-readable, potentially leading to a
+         disclosure of information (STR #4450)
        - The CUPS headers incorrectly needed libdispatch for blocks support
          (STR #4397)
        - CUPS did not compile when Avahi or mDNSResponder was not present