Skip to content

Update CHANGELOG.md for release 2.16.3 #171

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
smowton merged 2 commits into from
Feb 22, 2024
Merged

Update CHANGELOG.md for release 2.16.3 #171

Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
f6b18e6
Update CHANGELOG.md for release 2.16.3
smowton Feb 22, 2024
d6584c9
Replace nbsp with regular space
smowton Feb 22, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 26 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -17,6 +17,32 @@
you know what to do).
-->

## Release 2.16.3 (2024-02-22)

### Security patches

- Fixes CVE-2024-25129, a limited data exfiltration vulnerability that
could be triggered by untrusted databases or QL packs. See the
[security advisory](https://github.com/github/codeql-cli-binaries/security/advisories/GHSA-gf8p-v3g3-3wph)
for more information.

### New Features

- A new extractor option has been added to the Python extractor.
Set the new extractor option `python_executable_name` or the environment variable
`CODEQL_EXTRACTOR_PYTHON_OPTION_PYTHON_EXECUTABLE_NAME` to one of `py`, `python` or `python3`
to override the default Python executable search and selection behavior of the Python extractor.
For example, on Windows machines, the Python extractor will expect to find `py.exe` on the
system `PATH` by default. Setting this extractor option or environment variable allows
overriding this behavior to look for a different name like `python` or `python3`.
More detail can be found in [the extractor option documentation](https://docs.github.com/en/code-security/codeql-cli/using-the-advanced-functionality-of-the-codeql-cli/extractor-options).

### Bugs fixed

- Fixed a bug where CodeQL may produce an invalid database when it exhausts
all available ID numbers. Now it detects the condition and reports an
error instead.

## Release 2.16.2 (2024-02-12)

- There are no user-facing changes in this release.
Expand Down