mutable/publish: add errback immediately after write, don't consume errors from other...

[tahoe-lafs/tahoe-lafs.git] / NEWS.rst

diff --git a/NEWS.rst b/NEWS.rst
index b916844436b4853c5435f621c9fd24d16b630461..d6084f1c0e64751a36cc0237a54e320822baf7e7 100644 (file)
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -87,6 +87,21 @@ Compatibility and Dependencies
    exploitable.) (#1528).
 
 
+Release 1.8.3 (2011-09-13)
+--------------------------
+
+Security-related Bugfix
+'''''''''''''''''''''''
+
+- Fix flaw that would allow a person who knows a storage index of a file to
+  delete shares of that file (#1528).
+- Remove corner cases in mutable file bounds management which could expose
+  extra lease info or old share data (from prior versions of the mutable
+  file) if someone with write authority to that mutable file exercised these
+  corner cases in a way that no actual Tahoe-LAFS client does. (Probably not
+  exploitable.) (#1528).
+
+
 Release 1.8.2 (2011-01-30)
 --------------------------