summaryrefslogtreecommitdiff
path: root/NEWS
diff options
context:
space:
mode:
authorAkim Demaille <akim.demaille@gmail.com>2020-09-06 13:16:06 +0200
committerAkim Demaille <akim.demaille@gmail.com>2020-09-06 13:19:03 +0200
commit5d711972b881f8fa79a8ba4605a39a0d0bf4d9e4 (patch)
tree94450fda39ac47ebcf646263fc9a2ef218a9b95e /NEWS
parent0d8407440c6514795e1fc055062002b731c5f209 (diff)
parentdcdd119f69e63a47baff20d3c33778f7ad08b348 (diff)
downloadbison-5d711972b881f8fa79a8ba4605a39a0d0bf4d9e4.tar.gz
Merge branch 'maint' (i.e., Bison 3.7.2)
* upstream/maint: maint: post-release administrivia version 3.7.2 build: disable syntax-check warning gnulib: update build: fix incorrect dependencies doc: updates gnulib: update tests: beware of sed portability issues
Diffstat (limited to 'NEWS')
-rw-r--r--NEWS26
1 files changed, 25 insertions, 1 deletions
diff --git a/NEWS b/NEWS
index 5f869f12..b155644b 100644
--- a/NEWS
+++ b/NEWS
@@ -33,6 +33,29 @@ GNU Bison NEWS
↳ • ↳ ε
+* Noteworthy changes in release 3.7.2 (2020-09-05) [stable]
+
+ This release of Bison fixes all known bugs reported for Bison in MITRE's
+ Common Vulnerabilities and Exposures (CVE) system. These vulnerabilities
+ are only about bison-the-program itself, not the generated code.
+
+ Although these bugs are typically irrelevant to how Bison is used, they
+ are worth fixing if only to give users peace of mind.
+
+ There is no known vulnerability in the generated parsers.
+
+** Bug fixes
+
+ Fix concurrent build issues (introduced in Bison 3.5).
+
+ Push parsers always use YYMALLOC/YYFREE (no direct calls to malloc/free).
+
+ Fix portability issues of the test suite, and of bison itself.
+
+ Some unlikely crashes found by fuzzing have been fixed. This is only
+ about bison itself, not the generated parsers.
+
+
* Noteworthy changes in release 3.7.1 (2020-08-02) [stable]
** Bug fixes
@@ -587,7 +610,8 @@ GNU Bison NEWS
\005) with incorrect styling. Fixes for similar issues with unexpectedly
short lines (e.g., the file was changed between parsing and diagnosing).
- Several unlikely crashes found by fuzzing have been fixed.
+ Some unlikely crashes found by fuzzing have been fixed. This is only
+ about bison itself, not the generated parsers.
* Noteworthy changes in release 3.5.2 (2020-02-13) [stable]