Bug #738

diff --git a/NEWS b/NEWS
index 8e20374306a4345b55c222e071f785b461a1dd3f..9e8f34ff6ce86e557e00404619303cfc72d9ed01 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -60,6 +60,9 @@ What's new in Sudo 1.8.16
  * Fixed support for negating character classes in sudo's version
    of the fnmatch() function.
 
+ * Fixed a bug in the LDAP and SSSD backends that could allow an
+   unauthorized user to list another user's privileges.  Bug #738.
+
 What's new in Sudo 1.8.15
 
  * Fixed a bug that prevented sudo from building outside the source tree