Update NEWS

Signed-off-by: Simon McVittie <smcv@collabora.com>

diff --git a/NEWS b/NEWS
index 0a5b2c71c2b71500fbbd783f23c912f4cab7f8b6..40b10b462884cc53bcaa39fc4d6561f445088282 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -1,7 +1,27 @@
 dbus 1.15.4 (UNRELEASED)
 ========================
 
-...
+New API:
+
+• Add dbus_connection_set_builtin_filters_enabled(), intended to be called
+  by tools that use BecomeMonitor() such as dbus-monitor
+  (dbus#301, Kai A. Hiller)
+
+Fixes:
+
+• When connected to a dbus-broker, stop dbus-monitor from incorrectly
+  replying to Peer method calls that were sent to the dbus-broker with
+  a NULL destination (dbus#301, Kai A. Hiller)
+
+• Fix out-of-bounds varargs read in the dbus-daemon's config-parser.
+  This is not attacker-triggerable and appears to be harmless in practice,
+  but is technically undefined behaviour and is detected as such by
+  AddressSanitizer. (dbus!357, Evgeny Vereshchagin)
+
+• Meson build fixes:
+  · Fix build on macOS, and any other platform that has
+    CLOCK_MONOTONIC but not pthread_condattr_setclock()
+    (dbus#419, Jordan Williams)
 
 dbus 1.15.2 (2022-10-05)
 ========================