From 65f0ab5d46d80d55fc04d4eb14fa05f130eb8b9c Mon Sep 17 00:00:00 2001 From: Jamey Sharp Date: Sun, 3 Jun 2007 21:41:47 -0700 Subject: [PATCH] Move security fixes to the top of NEWS, and fix spacing. Commit by Josh Triplett and Jamey Sharp. --- NEWS | 14 +++++++++++--- 1 file changed, 11 insertions(+), 3 deletions(-) diff --git a/NEWS b/NEWS index 52a56cc1..e03d5562 100644 --- a/NEWS +++ b/NEWS @@ -1,7 +1,9 @@ Version 1.1.2 - 2007-06-03 -* Fix CVE-2007-1667: Multiple integer overflows in the XGetPixel() and - XInitImage() functions. +* Security fixes: + * Fix CVE-2007-1667: Multiple integer overflows in the XGetPixel() and + XInitImage() functions. + * Bug #9279: Fixed a file descriptor leak. * Xlib/XCB: Ensure _XReadEvents reads at least one new event and blocks for exactly one event. Large performance improvement for XIfEvent and similar. @@ -30,16 +32,22 @@ Version 1.1.2 - 2007-06-03 * Bug #7703: Fixed XSetSizeHints() et al wrt use of uninitialized data. Now only those fields of the respective hint struct are set that are actually valid in the input data. + * Bug #10292: Fixed a memory leak related to XOpenDisplay() in the XCB code. + * Bug #7713: Initialize all of the event's fields before sending it. -* Bug #9279: Fixed a file descriptor leak. + * Bug #10562: Define _GNU_SOURCE on glibc systems. + * Use unistd.h to get getresuid() and friends, now that we have _GNU_SOURCE defined. * Switched function definitions from K&R to ANSI style. + * Many constness fixes. + * Fixed a few warnings. + * Fix 64bit issues with reallocation. * Manpage fixes: