X-Git-Url: https://code.grnet.gr/git/ganeti-local/blobdiff_plain/b0fc8c8943764d182fe2cc1876747ea2c2e4df09..701c2dd6eb99d085e018b70d48971e93a961de30:/NEWS

diff --git a/NEWS b/NEWS
index 754e50d..6c584b4 100644
--- a/NEWS
+++ b/NEWS
@@ -1,3 +1,7 @@
+Version 1.2.9
+  - Fix security issue due to missing validation of iallocator names;
+    this allows execution of arbitrary executables
+
 Version 1.2.8
   - Fix a potential bug in export instance
   - Fix compatibility with Twisted 8.x