ncurses 6.4 - patch 20230418

[ncurses.git] / NEWS

diff --git a/NEWS b/NEWS
index 12e6674263f381fd4e49e1bc60efea31c090b607..9d1440069bb10f928ddef0e83633cabf749b2910 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -26,7 +26,7 @@
 -- sale, use or other dealings in this Software without prior written        --
 -- authorization.                                                            --
 -------------------------------------------------------------------------------
--- $Id: NEWS,v 1.3932 2023/04/15 20:08:13 tom Exp $
+-- $Id: NEWS,v 1.3939 2023/04/18 22:22:09 tom Exp $
 -------------------------------------------------------------------------------
 
 This is a log of changes that ncurses has gone through since Zeyd started
@@ -46,6 +46,15 @@ See the AUTHORS file for the corresponding full names.
 Changes through 1.9.9e did not credit all contributions;
 it is not possible to add this information.
 
+20230418
+       + improve checks for limits on privileged execution:
+         + modify _nc_syserr_abort() to use _nc_env_access(), rather than
+           only checking root uid.
+         + use getauxval() when available, to improve setuid/setgid checks.
+         + modify test packages to disable root access/environ options.
+       + modify tgoto() to accept no-parameter capabilities, for joe editor
+         (OpenSUSE #1210485, Gentoo #904263).
+
 20230415
        + configure script fixes:
          + fix copy/paste error in configure option --disable-root-access