whatsnew: add a paragraph about PIE+SSP change

This commit is contained in:
Xi Ruoyao 2022-09-27 10:47:11 +08:00
parent f427ba2336
commit 471a32e836
No known key found for this signature in database
GPG Key ID: ACAAD20E19E710E3

View File

@ -11,6 +11,14 @@
<title>What's new since the last release</title>
<para>In 11.3 release, <parameter>--enable-default-pie</parameter>
and <parameter>--enable-default-ssp</parameter> are enabled for GCC.
They can mitigate some type of malicious attacks but they cannot provide
a full protection. In case if you are reading a programming textbook,
you may need to disable PIE and SSP with GCC options
<parameter>-fno-pie -no-pie -fno-stack-protection</parameter>
because some textbooks assume they were disabled by default.</para>
<para>Below is a list of package updates made since the previous
release of the book.</para>