ViewVC Help
View File | Revision Log | Show Annotations | Download File
/cvs/rxvt-unicode/Changes
(Generate patch)

Comparing rxvt-unicode/Changes (file contents):
Revision 1.1292 by sf-exg, Sat Dec 31 10:15:06 2022 UTC vs.
Revision 1.1293 by root, Sun Jan 1 17:39:56 2023 UTC

45 45
46TODO: rclock horribly time-biased 46TODO: rclock horribly time-biased
47TODO: rclock iso mode? 47TODO: rclock iso mode?
48 48
49TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpreted as underline, rather than \e[43m 49TODO: printf "\e[4:3m" - "undercurl" - should probbaly be interpreted as underline, rather than \e[43m
50TODO: pkg-config to find Xext
50 51
51 - implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater). 52 - implement a fix for CVE-2022-4170 (reported and analyzed by David Leadbeater).
52 While present in version 9.30, it should not be exploitable. It is exploitable 53 While present in version 9.30, it should not be exploitable. It is exploitable
53 in versions 9.25 and 9.26, at least, and allows anybody controlling output to 54 in versions 9.25 and 9.26, at least, and allows anybody controlling output to
54 the terminal to execute arbitrary code in the urxvt process. 55 the terminal to execute arbitrary code in the urxvt process.

Diff Legend

Removed lines
+ Added lines
< Changed lines
> Changed lines