X-Git-Url: https://git.sommitrealweird.co.uk/eoc.git/blobdiff_plain/f9259c79966a76b34330a0fb57cd0c55361bbab2..f54f3d8c9742315d939532f022b16b7e2f4f7c71:/NEWS?ds=sidebyside

diff --git a/NEWS b/NEWS
index dd70ea0..f53e259 100644
--- a/NEWS
+++ b/NEWS
@@ -1,5 +1,11 @@
 NEWS file for Enemies of Carlotta, a mailing list manager
 
+Significant user-visible changes from version 1.2.3 to version 1.2.4:
+
+    * A fix to CVE-2006-5875, a security problem where EoC did not quote
+      shell command line arguments properly. Thanks to Antti-Juhani
+      Kaijanaho for finding the problem.
+
 Significant user-visible changes from version 1.2.2 to version 1.2.3:
 
     * When there is a problem with MIME header encodings, don't kill EoC,