Hello,

On the 2013-03-22 05:42, Jim Meyering wrote:

> Hello,
> 
> I want to release diffutils-3.3, primarily to make it so
> the latest release is not susceptible to CVE-2012-3386.
> 
> Here's the current state of NEWS:
> 
>  ** New features
> 
>    --new-file (-N) and --unidirectional-new-file now allow comparisons to "-".
>    A standard input that's closed acts like a nonexistent file.
> 
>    A file name containing spaces, double quotes, backslashes or control
>    characters is now encoded in a diff header as a double-quoted C string
>    literal.  The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v and
>    \ooo (a three-digit octal number between 0 and 255) are used.
Please mention the new --no-dereference option, for which i also suggest to
add a shortopt('K'). Thanks.

See also http://lists.gnu.org/archive/html/bug-gnu-utils/2009-03/msg00070.html

Regards,

Denis Excoffier.


Reply via email to