Welcome to mirror list, hosted at ThFree Co, Russian Federation.

cygwin.com/git/newlib-cygwin.git - Unnamed repository; edit this file 'description' to name the repository.
summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorCorinna Vinschen <corinna@vinschen.de>2010-08-28 15:36:43 +0400
committerCorinna Vinschen <corinna@vinschen.de>2010-08-28 15:36:43 +0400
commit9bf2a8a84a186c4d5520d1111eb88595021cdf5b (patch)
treee5f0a7637474d24853ad984ca7f6599e2216d8ce
parent71d8f118da24bb5a31f406e5fba222a324913b05 (diff)
* new-features.sgml (ov-new1.7.7): Document change to avoid DLL
hijacking.
-rw-r--r--winsup/doc/ChangeLog5
-rw-r--r--winsup/doc/new-features.sgml5
2 files changed, 10 insertions, 0 deletions
diff --git a/winsup/doc/ChangeLog b/winsup/doc/ChangeLog
index a1982377a..3e231b5e4 100644
--- a/winsup/doc/ChangeLog
+++ b/winsup/doc/ChangeLog
@@ -1,3 +1,8 @@
+2010-08-28 Corinna Vinschen <corinna@vinschen.de>
+
+ * new-features.sgml (ov-new1.7.7): Document change to avoid DLL
+ hijacking.
+
2010-08-27 Corinna Vinschen <corinna@vinschen.de>
* new-features.sgml (ov-new1.7.7): Change to describe partial
diff --git a/winsup/doc/new-features.sgml b/winsup/doc/new-features.sgml
index bc6caaa80..e459d5ffa 100644
--- a/winsup/doc/new-features.sgml
+++ b/winsup/doc/new-features.sgml
@@ -12,6 +12,11 @@ the Cygwin CWD is not usable as Win32 CWD. See the reworked
<xref linkend="pathnames-win32-api"></xref> for details.
</para></listitem>
+<listitem><para>
+Make sure to follow the Microsoft security advisory concerning DLL hijacking.
+See the <ulink url="http://www.microsoft.com/technet/security/advisory/2269637.mspx">Microsoft Security Advisory (2269637) "Insecure Library Loading Could Allow Remote Code Execution"</ulink> for details.
+</para></listitem>
+
</itemizedlist>
</sect2>