ls now refuses to generate time stamps containing more than 1000 bytes.

diff --git a/NEWS b/NEWS
index 216470c8a7a4804b9966a32677632d3f0ba47561..78cf4d13b771ffdc5e13b35f7705799dea64278b 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -27,6 +27,9 @@ GNU coreutils NEWS                                    -*- outline -*-
   expr now detects integer overflow when evaluating large integers,
   rather than silently wrapping around.
 
+  ls now refuses to generate time stamps containing more than 1000 bytes, to
+  foil remote denial-of-service attacks (e.g., --time-style='+%1000000000Y').
+
   test now detects integer overflow when evaluating large integers,
   rather than silently wrapping around.