From 52dc8dcdea825e01c0668cba2b41315839b7ff99 Mon Sep 17 00:00:00 2001 From: Craig Small Date: Sat, 19 May 2018 08:11:23 +1000 Subject: [PATCH] misc: Update NEWS with CVE and library changes --- NEWS | 14 +++++++++++++- 1 file changed, 13 insertions(+), 1 deletion(-) diff --git a/NEWS b/NEWS index 54627ffc..0483f270 100644 --- a/NEWS +++ b/NEWS @@ -1,10 +1,22 @@ +procps-ng-3.3.15 +---------------- + * library: Increment to 8:0:1 + No removals, no new functions + Changes: slab and pid structures + * pgrep: Fix stack-based buffer overflow CVE-2018-1125 + * ps: Fix buffer overflow in output buffer, causing DOS CVE-2018-1123 + * library: Just check for SIGLOST and don't delete it issue #93 + * library: Fix integer overflow and LPE in file2strvec CVE-2018-1124 + * library: Use size_t for alloc functions CVE-2018-1126 + * library: Increase comm size to 64 + * top: Don't use cwd for location of config CVE-2018-1122 + procps-ng-3.3.14 ---------------- * free: Fix scaling on 32-bit systems issue #89 * pgrep: Don't segfault on non match Debian #894917 * pgrep/pkill: Revert so matches all namespaces issue #91 * library: Build on non-glibc systems issue #88 - * library: Just check for SIGLOST and don't delete it issye #93 procps-ng-3.3.13 ----------------