From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 5059 invoked by alias); 30 Apr 2015 22:14:03 -0000 Mailing-List: contact zsh-workers-help@zsh.org; run by ezmlm Precedence: bulk X-No-Archive: yes List-Id: Zsh Workers List List-Post: List-Help: X-Seq: 35010 Received: (qmail 17517 invoked from network); 30 Apr 2015 22:14:01 -0000 X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on f.primenet.com.au X-Spam-Level: X-Spam-Status: No, score=-2.7 required=5.0 tests=BAYES_00,DKIM_SIGNED, DKIM_VALID,DKIM_VALID_AU,FREEMAIL_FROM,RCVD_IN_DNSWL_LOW autolearn=ham version=3.3.2 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=v7jAiM6BqbiabxDL7t9VKRkd9dyspumbVQ58QMhwleQ=; b=zGxZiWIITjFRYK/jtzj6LABm+IW5px/1q4gKUWrIPy5Htip9AFtFGuufAJWSizjpsK BxIgDs9G56H71VHysihOQMxGn03Sf6MBecwqaugFbW/S/uC6HHqX40VwgFYPs+tp/ABB dSCLP72B0VYMwYeLAodxBq/6yQ2F+FQgqkpHdhJsyMJ32an+3x4yUBNTiWKkCksa7gmK DE/Sjdd2ZYUsHclSaoGa+RMqtzZmPdGSP7jg1oqiBxRPbJ78o4sJoF3V9H4RA6WHAkti 8nvHlzfe3GXXHsWZTQHJKaJ4zkpVXIm5GR8Xatk5kN8I+hwOB+AzGOsxKS8uw3lXVNGp hw4w== MIME-Version: 1.0 X-Received: by 10.50.114.35 with SMTP id jd3mr6594201igb.14.1430432036462; Thu, 30 Apr 2015 15:13:56 -0700 (PDT) In-Reply-To: <20150430210312.5c62314e@ntlworld.com> References: <20150430210312.5c62314e@ntlworld.com> Date: Fri, 1 May 2015 00:13:56 +0200 Message-ID: Subject: Re: PATCH: 5.0.8 notes From: Mikael Magnusson To: Peter Stephenson Cc: Zsh hackers list Content-Type: text/plain; charset=UTF-8 On Thu, Apr 30, 2015 at 10:03 PM, Peter Stephenson wrote: > There ought to be more worth mentioning... > > -Note in particular there is a security fix to disallow evaluation of the > -initial values of integer variables imported from the environment (they > -are instead treated as literal numbers). That could allow local > -privilege escalation, under some specific and atypical conditions where > -zsh is being invoked in privilege elevation contexts when the > -environment has not been properly sanitized, such as when zsh is invoked > -by sudo on systems where "env_reset" has been disabled. > +This is version 5.0.8 of the shell. This is a stable release. > +There are no significant new features since 5.0.6, but there should this say .7? ^ I'm not sure how much we usually list here but here's some stuff from a look through the git log, ${(p.$param.) some numerous changes to the vi mode, i don't use it but maybe oliver can chime in? waiting on already exited processes whence -v lists file function was defined in -S shows intermediate symlink steps $(< error not fatal anymore faster history lockfile retrying zsh/db/gdbm module, ztie -r / zuntie -u pattern support in watch variable aliasing && and other tokens (this is already in NEWS, but not listed separately for .8) posix builtins and exec + assignments -- Mikael Magnusson