~ chicken-core (chicken-5) 34a2bb657a99c5d0bced737c0ad7793222e8eb9b
commit 34a2bb657a99c5d0bced737c0ad7793222e8eb9b Author: Peter Bex <peter.bex@xs4all.nl> AuthorDate: Mon Apr 29 21:54:15 2013 +0200 Commit: Peter Bex <peter.bex@xs4all.nl> CommitDate: Mon Apr 29 21:54:15 2013 +0200 Add CVE identifier for qs issue to NEWS (CVE-2013-2024) diff --git a/NEWS b/NEWS index b81e8b92..d5ac72b1 100644 --- a/NEWS +++ b/NEWS @@ -4,9 +4,10 @@ - CVE-2013-1874: ./.csirc is no longer loaded from the current directory upon startup of csi, which could lead to untrusted code execution. (thanks to Florian Zumbiehl) - - On *nix, the qs procedure now single-quotes everything instead of relying - on a blacklist of shell characters to be escaped. On Windows, it properly - duplicates double-quote characters. (thanks to Florian Zumbiehl) + - CVE-2013-2024: On *nix, the qs procedure now single-quotes everything + instead of relying on a blacklist of shell characters to be escaped. + On Windows, it properly duplicates double-quote characters. (thanks + to Florian Zumbiehl) - Tools - csc: added "-oi"/"-ot" options as alternatives to "-emit-inline-file"Trap