~ chicken-core (chicken-5) 34a2bb657a99c5d0bced737c0ad7793222e8eb9b
commit 34a2bb657a99c5d0bced737c0ad7793222e8eb9b
Author: Peter Bex <peter.bex@xs4all.nl>
AuthorDate: Mon Apr 29 21:54:15 2013 +0200
Commit: Peter Bex <peter.bex@xs4all.nl>
CommitDate: Mon Apr 29 21:54:15 2013 +0200
Add CVE identifier for qs issue to NEWS (CVE-2013-2024)
diff --git a/NEWS b/NEWS
index b81e8b92..d5ac72b1 100644
--- a/NEWS
+++ b/NEWS
@@ -4,9 +4,10 @@
- CVE-2013-1874: ./.csirc is no longer loaded from the current directory
upon startup of csi, which could lead to untrusted code execution.
(thanks to Florian Zumbiehl)
- - On *nix, the qs procedure now single-quotes everything instead of relying
- on a blacklist of shell characters to be escaped. On Windows, it properly
- duplicates double-quote characters. (thanks to Florian Zumbiehl)
+ - CVE-2013-2024: On *nix, the qs procedure now single-quotes everything
+ instead of relying on a blacklist of shell characters to be escaped.
+ On Windows, it properly duplicates double-quote characters. (thanks
+ to Florian Zumbiehl)
- Tools
- csc: added "-oi"/"-ot" options as alternatives to "-emit-inline-file"
Trap