X-Git-Url: https://diplodocus.org/git/nmh/blobdiff_plain/f2763b05544699fbc1455451652965f03385951f..8146bc09fc2e8ad69520ba998be51fb02cbf069c:/ChangeLog diff --git a/ChangeLog b/ChangeLog index 749e73cd..e44eda5d 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,28 @@ +Sun Feb 20 12:17:15 2000 Ruud de Rooij + + * Fix security hole in mhshowsbr.c which allowed untrusted shell + code to be executed. + * Released nmh 1.0.3. + +Thu Feb 10 10:54:36 2000 Dan Harkless + + * Oops. %-escapes on mhstore lines in mhn.defaults.sh should not + be surrounded by single quotes, as a shell is not spawned when + just saving files, and the filenames will end up with literal + quotes embedded in them. + +Fri Feb 04 12:29:12 2000 Dan Harkless + + * Whoever originally added the -help switch to all the commands + got too cute and had the option itself print out as "-(help)" in + the -help output. I guess the idea was to make reference to the + fact that clearly you know about the -help option since you're + currently looking at its output. I think it's a bad idea to + overload the meaning of the parentheses, however -- they're + supposed to indicate what abbreviated prefix of the switch you're + allowed to specify. It doesn't make sense to show that you're + allowed to "abbreviate" the switch to its entire length. + Thu Feb 03 17:52:01 2000 Dan Harkless * Applied wesley.craig@umich.edu's KPOP patches. According to him: