*** empty log message ***

diff --git a/Changes b/Changes
index 314377b471a9f8421c7845f202042a2d6aa19301..088da1afe96286a46c66518ce348c9e415bb21f3 100644 (file)
--- a/Changes
+++ b/Changes
@@ -1,5 +1,6 @@
 rxvt-unicode changelog <= google-friendly title
 
+TODO: move iso14755 box away from the mouse
 TODO: harmonize --disable-options into position-dependent options.
 TODO: after requesting the selection and getting a timeout, no further requests will be sent.
 TODO: safer command: keymap processing.
@@ -13,8 +14,13 @@ WISH: OnTheSpot editing, or maybe switch to miiiiiiif
 WISH: just for fun, do shade and tint with XRender.
 
 6.2
+        - SECURITY FIX: on systems using openpty (not GNU/Linux, probably
+          most BSDs), privileges weren't dropped before opening the pty,
+          resulting in wrong permissions on the pseudo terminal.
+          Reported and fixed by Ryan Beasley.
        - replaced callback.h by a fixed version from gvpe that correctly
-          returns the callback result. Reported by darix.
+          returns the callback result (affects new -pty-fd semantics in urxvtc
+          on a few architectures). Reported by darix.
 
 6.1  Tue Dec 27 13:23:40 CET 2005
        - update iso8859-7 table (euro and drachma round-trip et al.).