Another bug-fix release is coming

Okay, there have been a few notable fixes since the last release and one of
them is a security fix, so it's time for another pre-1.0 release!

(I got a feeling that I should've named the version as 0.9.99, 0.9.999,
0.9.9999 etc.)

The security fix is about the command-line argument processing of Windows
cmd.exe.  Gauche is affected if you run .bat or .cmd file via sys-exec (or
do-process, run-process etc.)   It is easier to avoid in Gauche, for you
need to give .bat or .cmd extensions explicitly to run those files (we
don't rely on CreateProcess()'s feature to search with additional
extensions).  Nevertheless, it is a security vulnerability so it's better
to have it plugged.
https://kb.cert.org/vuls/id/123335

A couple of potential show-stopper bugs:
- build-standalone has been broken.
- TLS didn't work with newer MbedTLS.

Quite a few other bug fixes and a few new srfis will also be included.

--shiro

_______________________________________________
Gauche-devel mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/gauche-devel