From 0b3b57625388983a5545a21fe00569e92e988a8d Mon Sep 17 00:00:00 2001 From: "H.J. Lu" Date: Fri, 28 Nov 2014 07:59:50 -0800 Subject: Mention fix for PR 13862 --- NEWS | 9 +++++---- 1 file changed, 5 insertions(+), 4 deletions(-) (limited to 'NEWS') diff --git a/NEWS b/NEWS index 8f8203b310..5a3b9abb59 100644 --- a/NEWS +++ b/NEWS @@ -9,10 +9,11 @@ Version 2.21 * The following bugs are resolved with this release: - 6652, 12926, 14132, 14138, 14171, 14498, 15215, 15884, 16469, 16619, - 16740, 17266, 17344, 17363, 17370, 17371, 17411, 17460, 17475, 17485, - 17501, 17506, 17508, 17522, 17555, 17570, 17571, 17572, 17573, 17574, - 17582, 17583, 17584, 17585, 17589, 17594, 17608, 17616, 17625, 17633. + 6652, 12926, 13862, 14132, 14138, 14171, 14498, 15215, 15884, 16469, + 16619, 16740, 17266, 17344, 17363, 17370, 17371, 17411, 17460, 17475, + 17485, 17501, 17506, 17508, 17522, 17555, 17570, 17571, 17572, 17573, + 17574, 17582, 17583, 17584, 17585, 17589, 17594, 17608, 17616, 17625, + 17633. * CVE-2104-7817 The wordexp function could ignore the WRDE_NOCMD flag under certain input conditions resulting in the execution of a shell for -- cgit v1.2.3