Mirrors/fish-shell
2
0
Fork 0
mirror of https://github.com/fish-shell/fish-shell synced 2024-12-27 05:13:10 +00:00
Code Issues Projects Releases Packages Wiki Activity

Release 3.6.2

Browse source 
Fix for CVE-2023-49284.
This commit is contained in:
David Adam 2023-12-04 21:52:10 +08:00
parent 09986f5563
commit a51437ec83
1 changed files with 11 additions and 33 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

44
CHANGELOG.rst
View file

@ -1,40 +1,18 @@
fish 3.6.2 (released ???)
=========================
fish 3.6.2 (released December 4, 2023)
======================================
This release of fish contains a number of fixes for problems identified in fish 3.6.1, as well as some enhancements.
This release of fish contains a security fix for CVE-2023-49284, a minor security problem identified
in fish 3.6.1 and previous versions (thought to affect all released versions of fish).
Notable improvements and fixes
------------------------------
???
fish uses certain Unicode non-characters internally for marking wildcards and expansions. It
incorrectly allowed these markers to be read on command substitution output, rather than
transforming them into a safe internal representation.
Deprecations and removed features
---------------------------------
???
For example, ``echo \UFDD2HOME`` has the same output as ``echo $HOME``.
Scripting improvements
----------------------
???
Interactive improvements
------------------------
???
Improved prompts
^^^^^^^^^^^^^^^^
???
Completions
^^^^^^^^^^^
- Added completions for:
- ???
Other improvements
------------------
- Improvements and corrections to the documentation.
For distributors
----------------
???
While this may cause unexpected behavior with direct input, this may become a minor security problem
if the output is being fed from an external program into a command substitution where this output
may not be expected.
--------------