release: update NEWS with entires from 1.14.6

1 files changed, 40 insertions, 5 deletions

diff --git a/NEWS b/NEWS
index e140a4ad60..a239e5db27 100644
--- a/NEWS
+++ b/NEWS
@@ -11,16 +11,51 @@ USE AT YOUR OWN RISK.  NOT RECOMMENDED FOR PRODUCTION USE!
 * Check connectivity per address family.
 * Allow binding a connections lifetime to the DBus client that activated it.
 * Add support for establishing Wi-Fi Direct connections (Wi-Fi P2P).
-* Use a new type of secret-keys that combines the secret value with /etc/machine-id.
-  This way when cloning a VM it suffices to change machine-id to generate different
-  addresses.
 * Add support for WireGuard VPN tunnels to NetworkManager. D-Bus API and libnm
   support all options. nmcli supports creating and managing WireGuard profiles,
   with the exception of configuring and showing peers.
 
 The following changes were backported to 1.14.x releases between 1.14.0
-and 1.14.2 are also present in NetworkManager-1.14:
-
+and 1.14.6 are also present in NetworkManager-1.14:
+
+- 1.14.6:
+* Fix memory corruption in internal DHCPv6 client (CVE-2018-15688).
+* No longer limit number of search entires in resolv.conf to 6.
+* Support restricting NetworkManager.conf device configuration based on used DHCP
+  plugin.
+* Add "${MAC}" specifier for connection.stable-id. This uses the current MAC
+  address for seeding the stable generation of MAC address, DHCP client-id
+  or IPv6 stable-privacy interface identifier.
+* Support special value "duid" for "ipv4.dhcp-client-id". This generates an
+  RFC4361-compliant client-id like the internal DHCP client used to do by default.
+  Previously, there was no explicit name for such a client-id and it was not
+  usable with dhclient DHCP plugin. This also generates the same client-id as
+  systemd-networkd does by default.
+* Support and use a new kind of secret-key in "/var/lib/NetworkManager/secret_key".
+  The secret-key represents the identity of the machine that is used for various
+  purposes like generating IPv6 stable privacy addesses. It is now combined
+  with "/etc/machine-id" so that changing only the machine-id results in new identifiers.
+  That matters for example when cloning a virtual machine. Previously, the user
+  hard to prune NetworkManager's secret-key to get a new identity, now regenerating
+  machine-id suffices. Secret-keys generated by earlier versions of NetworkManager are
+  not affected and keep their previous behavior.
+* Fix the DHCP client-ids based on the MAC address of IPoIB/infiniband devices.
+* Fix restoring IP configuration after interface went down.
+* No longer let NetworkManager touch rp_filter setting. The rp_filter sysctl must now
+  be set outside of NetworkManager according to the admin's preference. Note that a strict
+  rp_filter may break valid use-cases and interacts badly with connectivity checking.
+* Various bug fixes and improvements.
+
+- 1.14.4:
+* Fix a crash in nmcli when a device is removed while being disconnected.
+* Fix a crash in ifupdown (Debian) configuration plugin.
+* Fix a daemon crash when a generated connection doesn't validate.
+* Fix a memory leak in dhclient DHCP plugin.
+* Fix line editing in nmcli password prompts.
+* Fix a RPATH in bluetooth and wwan plugin when built with Meson (otherwise
+  they wouldn't find libnm-wwan.so).
+
+- 1.14.2:
 * Fix a bug that could cause NetworkManager to crash after checking
   connectivity status.
 * Correctly apply a default (-1) metric from DHCP.