--- rxvt-unicode/Changes	2005/12/27 16:41:40	1.463
+++ rxvt-unicode/Changes	2005/12/31 16:06:48	1.464
@@ -1,5 +1,6 @@
 rxvt-unicode changelog <= google-friendly title
 
+TODO: move iso14755 box away from the mouse
 TODO: harmonize --disable-options into position-dependent options.
 TODO: after requesting the selection and getting a timeout, no further requests will be sent.
 TODO: safer command: keymap processing.
@@ -13,8 +14,13 @@
 WISH: just for fun, do shade and tint with XRender.
 
 6.2
+        - SECURITY FIX: on systems using openpty (not GNU/Linux, probably
+          most BSDs), privileges weren't dropped before opening the pty,
+          resulting in wrong permissions on the pseudo terminal.
+          Reported and fixed by Ryan Beasley.
 	- replaced callback.h by a fixed version from gvpe that correctly
-          returns the callback result. Reported by darix.
+          returns the callback result (affects new -pty-fd semantics in urxvtc
+          on a few architectures). Reported by darix.
 
 6.1  Tue Dec 27 13:23:40 CET 2005
 	- update iso8859-7 table (euro and drachma round-trip et al.).