diff --git a/ChangeLog b/ChangeLog index 7566c62..c449155 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,14 +1,24 @@ -2014-07-28 David A. Wheeler +2014-08-02 David A. Wheeler * Release version 1.31, a set of small improvements mostly CWE-related. * Note that flawfinder is officially CWE-compatible. * Support GNU make install conventions (prefix, bindir, DESTDIR, etc.). + The older program-specific conventions are still supported, but + the documentation emphasizes using the standard conventions instead. * Simplified installation text. + * Added more wide character function rules. * Add reference to info at "http://www.dwheeler.com/secure-programs". * Document that hitlists should be trusted to be loaded or diffed. + These are implented using Python's pickle module, and that module + presumes the data is from a trustworthy source. In the expected + use case this is fine... but it needed to be documented. * Tweak/improve mappings to CWE. E.G., strlen() - better maps to CWE-126 (buffer over-read). + better maps to CWE-126 (buffer over-read). In a few cases the + CWE mappings weren't reported as such; that is now fixed. + CWEs are actually a hierarchy; expose a little of this so + people can more easily search on them. + * Add "-H" option as synonym for "--html". -2014-07-13 David A. Wheeler +2014-07-19 David A. Wheeler * Release 1.29, primarily for CWE improvements. * Multi-line formatting is faster and formats better. * Documentation about CWEs has been improved.