~ chicken-core (chicken-5) 34a2bb657a99c5d0bced737c0ad7793222e8eb9b


commit 34a2bb657a99c5d0bced737c0ad7793222e8eb9b
Author:     Peter Bex <peter.bex@xs4all.nl>
AuthorDate: Mon Apr 29 21:54:15 2013 +0200
Commit:     Peter Bex <peter.bex@xs4all.nl>
CommitDate: Mon Apr 29 21:54:15 2013 +0200

    Add CVE identifier for qs issue to NEWS (CVE-2013-2024)

diff --git a/NEWS b/NEWS
index b81e8b92..d5ac72b1 100644
--- a/NEWS
+++ b/NEWS
@@ -4,9 +4,10 @@
   - CVE-2013-1874: ./.csirc is no longer loaded from the current directory
     upon startup of csi, which could lead to untrusted code execution.
     (thanks to Florian Zumbiehl)
-  - On *nix, the qs procedure now single-quotes everything instead of relying
-    on a blacklist of shell characters to be escaped.  On Windows, it properly
-    duplicates double-quote characters.  (thanks to Florian Zumbiehl)
+  - CVE-2013-2024: On *nix, the qs procedure now single-quotes everything
+    instead of relying on a blacklist of shell characters to be escaped.
+    On Windows, it properly duplicates double-quote characters.  (thanks
+    to Florian Zumbiehl)
 
 - Tools
   - csc: added "-oi"/"-ot" options as alternatives to "-emit-inline-file"
Trap