From fa92fc336bcbb580e1ee524126c87e30883f49d3 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Tim=20R=C3=BChsen?= Date: Fri, 14 Feb 2020 16:31:59 +0100 Subject: [PATCH] * NEWS: Update --- NEWS | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) diff --git a/NEWS b/NEWS index ade344fc..c0fe6cd1 100644 --- a/NEWS +++ b/NEWS @@ -5,6 +5,28 @@ See the end for copying conditions. Please send GNU Wget bug reports to . +* Changes in Wget 1.21 (unreleased) + +** Remove all uses of alloca + In some places the length of untrusted strings has been used, e.g. + strings from the command line or from remote. + +** Fix buffer overflows in progress bar code in some locales + +** Fix two null pointer accesses + +** Amend cookie file header to be recognized by the 'file' command + +** Post Handshake Authentication for OpenSSL + +** Require gettext version 0.19.3+ + +** Add configure flags --enable-fsanitize-ubsan, --enable-fsanitize-asan + and --enable-fsanitize-msan for gcc and clang + +** Make several smaller fixes, enhance fuzzing, enhance building + + * Changes in Wget 1.20.3 ** Fixed a buffer overflow vulnerability