diff lib-src/ChangeLog @ 35021:e66bc9cd4f54

*** empty log message ***
author Gerd Moellmann <gerd@gnu.org>
date Wed, 03 Jan 2001 12:53:05 +0000
parents 2f736da4eaf1
children 3e97804526ed
line wrap: on
line diff
--- a/lib-src/ChangeLog	Wed Jan 03 12:52:06 2001 +0000
+++ b/lib-src/ChangeLog	Wed Jan 03 12:53:05 2001 +0000
@@ -1,3 +1,12 @@
+2001-01-03  Paul Eggert  <eggert@twinsun.com>
+
+	* lib-src/rcs2log: Avoid security hole allowing attacker to
+	cause user of rcs2log to overwrite arbitrary files, fixing
+	a bug reported by Morten Welinder.
+
+	Don't put "exit 1" at the end of the exit trap; it's
+	ineffective in POSIX shells.
+
 2001-01-02  Gerd Moellmann  <gerd@gnu.org>
 
 	* ebrowse.c (yyerror): Changed to take two arguments.  Prototype