test/test_mutable: refactor publish surprise test into common test fixture, rewrite...

[tahoe-lafs/tahoe-lafs.git] / NEWS.rst

diff --git a/NEWS.rst b/NEWS.rst
index 40ef4b83d33f6d1bad27adac46f6be045bf71d64..d6084f1c0e64751a36cc0237a54e320822baf7e7 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -76,6 +76,32 @@ Compatibility and Dependencies
 .. _`#1438`: http://tahoe-lafs.org/trac/tahoe-lafs/ticket/1438
 
 
+** Security-related Bugfix
+
+ - Fix flaw that would allow a person who knows a storage index of a file to
+   delete shares of that file (#1528).
+ - Remove corner cases in mutable file bounds management which could expose
+   extra lease info or old share data (from prior versions of the mutable
+   file) if someone with write authority to that mutable file exercised these
+   corner cases in a way that no actual Tahoe-LAFS client does. (Probably not
+   exploitable.) (#1528).
+
+
+Release 1.8.3 (2011-09-13)
+--------------------------
+
+Security-related Bugfix
+'''''''''''''''''''''''
+
+- Fix flaw that would allow a person who knows a storage index of a file to
+  delete shares of that file (#1528).
+- Remove corner cases in mutable file bounds management which could expose
+  extra lease info or old share data (from prior versions of the mutable
+  file) if someone with write authority to that mutable file exercised these
+  corner cases in a way that no actual Tahoe-LAFS client does. (Probably not
+  exploitable.) (#1528).
+
+
 Release 1.8.2 (2011-01-30)
 --------------------------