X-Git-Url: http://git.savannah.gnu.org/gitweb/?p=enscript.git;a=blobdiff_plain;f=src%2FChangeLog;h=b5e7680befa837f4397ec6cf02769948fa7816f0;hp=7557664ad89a7117cb062beedb9db4af1197db1a;hb=9510e4315705329e51b27fa2f3f688989b9fb37f;hpb=0acc7b63a1be9f5d02f1a21d6df52cb5a9ce7e58

diff --git a/src/ChangeLog b/src/ChangeLog
index 7557664..b5e7680 100644
--- a/src/ChangeLog
+++ b/src/ChangeLog
@@ -1,3 +1,17 @@
+2009-12-27  Tim Retout  <diocles@gnu.org>
+
+	Apply patch from Debian Security Team for CAN-2004-1184.
+
+	* gsint.h: Add shell_escape prototype.
+	* util.c (shell_escape): New function to escape filenames for
+	shell usage.
+	* util.c (is_open): Use shell_escape to expand command buffer.
+
+	* main.c (main): Use single quotes when building command string,
+	and use shell_escape to quote contents.
+
+	* util.c (escape_string): Check return code of xmalloc.
+
 2009-03-28  Tim Retout  <diocles@gnu.org>
 
 	* psgen.c (recognize_eps_file): Remove ability to read EPS data