Mention fix for PR 13862

This commit is contained in:
H.J. Lu 2014-11-28 07:59:50 -08:00
parent d8dd00805b
commit 0b3b576253

9
NEWS
View File

@ -9,10 +9,11 @@ Version 2.21
* The following bugs are resolved with this release:
6652, 12926, 14132, 14138, 14171, 14498, 15215, 15884, 16469, 16619,
16740, 17266, 17344, 17363, 17370, 17371, 17411, 17460, 17475, 17485,
17501, 17506, 17508, 17522, 17555, 17570, 17571, 17572, 17573, 17574,
17582, 17583, 17584, 17585, 17589, 17594, 17608, 17616, 17625, 17633.
6652, 12926, 13862, 14132, 14138, 14171, 14498, 15215, 15884, 16469,
16619, 16740, 17266, 17344, 17363, 17370, 17371, 17411, 17460, 17475,
17485, 17501, 17506, 17508, 17522, 17555, 17570, 17571, 17572, 17573,
17574, 17582, 17583, 17584, 17585, 17589, 17594, 17608, 17616, 17625,
17633.
* CVE-2104-7817 The wordexp function could ignore the WRDE_NOCMD flag
under certain input conditions resulting in the execution of a shell for