X-Git-Url: http://git.marmaro.de/?p=mmh;a=blobdiff_plain;f=ChangeLog;h=e44eda5dea099e6254296f54dc069123fd88c0d4;hp=5bf8953027dc7fef46639da9986a9cef78a5b569;hb=8146bc09fc2e8ad69520ba998be51fb02cbf069c;hpb=5e6f0bdeffd667c5413ce27c73ea31c04fb9e9cf

diff --git a/ChangeLog b/ChangeLog
index 5bf8953..e44eda5 100644
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,16 @@
+Sun Feb 20 12:17:15 2000 Ruud de Rooij <ruud@ruud.org>
+
+	* Fix security hole in mhshowsbr.c which allowed untrusted shell
+	  code to be executed.
+	* Released nmh 1.0.3.
+
+Thu Feb 10 10:54:36 2000 Dan Harkless <dan-nmh@dilvish.speed.net>
+
+	* Oops.  %-escapes on mhstore lines in mhn.defaults.sh should not
+	be surrounded by single quotes, as a shell is not spawned when
+	just saving files, and the filenames will end up with literal
+	quotes embedded in them.
+
 Fri Feb 04 12:29:12 2000 Dan Harkless <dan-nmh@dilvish.speed.net>
 
 	* Whoever originally added the -help switch to all the commands