Re: mc/NEWS

[Leonard den Ottolander <leonard den ottolander nl>]

Hi,

On Wed, 2004-12-01 at 19:05, me pavelsh pp ru wrote:
>   Before release mc-4.6.1-pre2 we are needed to update mc/NEWS file.
>   Leonard. Could you do it, please?

I'm not sure if we should mention every single bug that we fixed, but
here are the most important items. Please mention any omissions.

Full audit of quoting of parameters in vfs scripts (CAN-2004-0494).
Hiding of FTP passwords.
Internal slang upgrade to 1.4.9.
Increased maximum screen size to 512 x 512.
Fixed CAN-2003-1023 (stack overflow in vfs_s_resolve_symlink)
Fixed CAN-2004-0226 (buffer overflows)
Fixed CAN-2004-0231 (unsafe temporary file and directory creation)
Fixed CAN-2004-0232 (format string vulnerablities)
Hide temporary commands from history.
Fixed crash on use of large syntax files.
New and improved syntax files (php, perl, diff and asp.net).
Various fixes in tar.c.
Numerous other bug fixes (vfs, editor, viewer).

Leonard.

-- 
mount -t life -o ro /dev/dna /genetic/research