Allow opening symlinks r/w, but don't actually allow writing. Fixes test426

[netatalk.git] / NEWS

diff --git a/NEWS b/NEWS
index 2d0f7799c3ce3e05a1d8baea006688c8d17f08d5..0c2515f7e749cd30b17fd9e3e90e50d566b71ef8 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,8 @@ Changes in 2.1-beta2
 ====================
 * NEW: afpd: static generated AFP signature stored in afp_signature.conf,
        cf man 5 afp_signature.conf
+* FIX: afpd: prevent security attack guessing valid server accounts. afpd
+       now returns error -5023 for unknown users, as does AppleFileServer.
 
 Changes in 2.1-beta1
 ====================