From 5a5e30b45acbdbe799cd4460ffef50294c538a06 Mon Sep 17 00:00:00 2001
From: hpa <hpa>
Date: Mon, 10 Feb 2003 10:51:41 +0000
Subject: Change the installer to use mtools instead of trying to play games
 with mounting the filesystem.

---
 NEWS | 8 ++++++++
 1 file changed, 8 insertions(+)

(limited to 'NEWS')

diff --git a/NEWS b/NEWS
index f57b8c96..107d8dd1 100644
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,14 @@ Starting with 1.47, changes marked with SYSLINUX/PXELINUX/ISOLINUX
 apply to that specific program only; other changes apply to all of
 them.
 
+Changes in 2.02:
+	* SYSLINUX: Security flaws have been found in the SYSLINUX
+	  installer when running setuid root.  Rewrite the SYSLINUX
+	  installer so it uses mtools instead.  It therefore now
+	  requires mtools (specifically mcopy and mattrib) to exist on
+	  your system, but it will not require root privileges and
+	  SHOULD NOT be setuid.
+
 Changes in 2.01:
 	* MEMDISK: Fix memory sizing bug when the ramdisk crosses the
 	  16 MB boundary.
-- 
cgit v1.2.1