From 9d55554bf1ad78c449e0e769658f8ed41382691d Mon Sep 17 00:00:00 2001
From: Paul Eggert <eggert@cs.ucla.edu>
Date: Fri, 11 Mar 2005 23:13:58 +0000
Subject: [PATCH] ls now refuses to generate time stamps containing more than
 1000 bytes.

---
 NEWS | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/NEWS b/NEWS
index 216470c8a7..78cf4d13b7 100644
--- a/NEWS
+++ b/NEWS
@@ -27,6 +27,9 @@ GNU coreutils NEWS                                    -*- outline -*-
   expr now detects integer overflow when evaluating large integers,
   rather than silently wrapping around.
 
+  ls now refuses to generate time stamps containing more than 1000 bytes, to
+  foil remote denial-of-service attacks (e.g., --time-style='+%1000000000Y').
+
   test now detects integer overflow when evaluating large integers,
   rather than silently wrapping around.
 
-- 
2.47.3