Now
netbsd-8 commitmail json YAML
src/bin/ed/ed.1@1.30.40.1
/
diff
/
nxr@1.30.40.1
src/bin/ed/main.c@1.28.8.1 / diff / nxr@1.28.8.1
src/usr.bin/patch/pch.c@1.28.8.1 / diff / nxr@1.28.8.1
src/bin/ed/main.c@1.28.8.1 / diff / nxr@1.28.8.1
src/usr.bin/patch/pch.c@1.28.8.1 / diff / nxr@1.28.8.1
Pull up following revision(s) (requested by christos in ticket #699):
bin/ed/ed.1: 1.32-1.33
bin/ed/main.c: 1.29
usr.bin/patch/pch.c: 1.29
Pass -S to ed(1) so that patches containing ! commands don't run commands.
Real cause of CVE-2018-0492:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667)
--
add -S to disable ! commands.
--
Fix date.
bin/ed/ed.1: 1.32-1.33
bin/ed/main.c: 1.29
usr.bin/patch/pch.c: 1.29
Pass -S to ed(1) so that patches containing ! commands don't run commands.
Real cause of CVE-2018-0492:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=894667)
--
add -S to disable ! commands.
--
Fix date.