Yeraze / ytnef

Yeraze's TNEF Stream Reader - for winmail.dat files
GNU General Public License v2.0
32 stars 22 forks source link

ChangeLog update for 1.9.1 #30

Closed jmallach closed 7 years ago

jmallach commented 7 years ago

Hi Yeraze,

I've seen the 1.9.1 release and was about to package it for Debian, when I had a look at the individual commits from #27. Well, some of those seem bad enough to even warrant some CVEs being issued.

But at least, the ChangeLog should be updated to mention these issues individually, and have some [SECURITY] markers all around the place, even with if it were valid markup.

If #28 is fixed, I think that could also make up for a 1.9.2.

Thanks!

jmallach commented 7 years ago

You can now add the CVE numbers for all the individual issues. See https://security-tracker.debian.org/tracker/source-package/libytnef

Yeraze commented 7 years ago

Please check #32

Yeraze commented 7 years ago

Incorporated into 1.9.2 release