From: Chris Allegretta Date: Wed, 14 Apr 2010 21:53:59 +0000 (+0000) Subject: Add CVE information for the fixes in this release. X-Git-Tag: v2.2.4~2 X-Git-Url: https://git.wh0rd.org/?a=commitdiff_plain;h=c859049041b616215f38d272ce56417694e1ed10;p=nano.git Add CVE information for the fixes in this release. git-svn-id: svn://svn.savannah.gnu.org/nano/trunk/nano@4501 35c25a1d-7b9e-4130-9fde-d3aeb78583b8 --- diff --git a/ChangeLog b/ChangeLog index 47a64321..13c41729 100644 --- a/ChangeLog +++ b/ChangeLog @@ -5,14 +5,15 @@ whether current_stat is set when trying to use it, and don't do the modification check if the filename changed, since we have no way of knowing about it in that case. Fixes Savannah bug 29392, reported - by Mike Frysinger. + by Mike Frysinger. [CVE-2010-1160] 2010-04-13 Felipe Bugno * doc/syntax/cmake.nanorc: Added cmake syntax highlighting file. 2010-04-09 Chris Allegretta * files.c (do_writeout): Better security fixes for backup file writing, - mangled from submission by Dan Rosenberg . + mangled from submission by Dan Rosenberg + [CVE-2010-1161] 2010-04-08 Chris Allegretta * files.c (do_writeout): Previous fixes should not cause a crash @@ -27,7 +28,8 @@ original file's device ID and inode number as reasons to warn the user that the file has been modified. Also abort on writing a backup file when its owner doesn't match the edited file. Based on security - analysis on nano by Dan Rosenberg. + analysis on nano by Dan Rosenberg. [CVE-2010-1160] + 2010-03-21 Chris Allegretta * nano.c (page_stdin et al): Don't attempt to reset/reopen the terminal