commit: 20e2da74035d9240c0c26622eda97040ae637ef5 Author: Sam James <sam <AT> gentoo <DOT> org> AuthorDate: Sun Sep 14 09:52:05 2025 +0000 Commit: Sam James <sam <AT> gentoo <DOT> org> CommitDate: Sun Sep 14 09:52:52 2025 +0000 URL: https://gitweb.gentoo.org/proj/portage.git/commit/?id=20e2da74
NEWS: rephrase 3.0.69 a bit Signed-off-by: Sam James <sam <AT> gentoo.org> NEWS | 7 ++++--- 1 file changed, 4 insertions(+), 3 deletions(-) diff --git a/NEWS b/NEWS index d8d480579b..5123e85266 100644 --- a/NEWS +++ b/NEWS @@ -26,15 +26,16 @@ Security: * The emerge-webrsync utility will now parse the output of gpg(1) correctly and safely. This addresses a security issue affecting users that might - run emerge-werbsync in a situation where gemato is unusable, for whatever + run emerge-webrsync in a situation where gemato is unusable, for whatever reason. * The emerge-webrsync utility will now validate the input that it obtains from the "metadata/timestamp.x" file. - This addresses a security issue whereby arbitrary code execution was + This addresses a possible security issue whereby arbitrary code execution was achievable in the course of bash performing arithmetic operations on - numbers representing unix time. + numbers representing unix time. The permissions on this should be limited + to portage:portage, so limited impact. Features:
