Fix for <https://nvd.nist.gov/vuln/detail?vulnId=CVE-2015-8560>.

--- a/util.c	2015-10-30 15:45:03 +0000
+++ b/util.c	2015-12-12 23:27:21 +0000
@@ -31,7 +31,7 @@
 #include <assert.h>
 
 
-const char* shellescapes = "|<>&!$\'\"`#*?()[]{}";
+const char* shellescapes = "|;<>&!$\'\"`#*?()[]{}";
 
 const char * temp_dir()
 {
<table id='header'>
<tr>
<td class='logo' rowspan='2'><a href='/'><img src='https://git.koszko.org/cgit-static/cgit.png' alt='cgit logo'/></a></td>
<td class='main'><a href='/'>index</a> : <a href='/guix/'>guix</a></td><td class='form'><form method='get'>
<input type='hidden' name='id' value='de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'/><select name='h' onchange='this.form.submit();'>
<option value='koszko' selected='selected'>koszko</option>
<option value='koszko-scripts'>koszko-scripts</option>
</select> <input type='submit' value='switch'/></form></td></tr>
<tr><td class='sub'>Wojtek's customized Guix</td><td class='sub right'></td></tr></table>
<table class='tabs'><tr><td>
<a href='/guix/about/'>about</a><a href='/guix/'>summary</a><a href='/guix/refs/?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>refs</a><a class='active' href='/guix/log/gnu/packages/irc.scm'>log</a><a href='/guix/tree/gnu/packages/irc.scm?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>tree</a><a href='/guix/commit/gnu/packages/irc.scm?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>commit</a><a href='/guix/diff/gnu/packages/irc.scm?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>diff</a></td><td class='form'><form class='right' method='get' action='/guix/log/gnu/packages/irc.scm'>
<input type='hidden' name='id' value='de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'/><select name='qt'>
<option value='grep'>log msg</option>
<option value='author'>author</option>
<option value='committer'>committer</option>
<option value='range'>range</option>
</select>
<input class='txt' type='search' size='10' name='q' value=''/>
<input type='submit' value='search'/>
</form>
</td></tr></table>
<div class='path'>path: <a href='/guix/log/?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>root</a>/<a href='/guix/log/gnu?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>gnu</a>/<a href='/guix/log/gnu/packages?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>packages</a>/<a href='/guix/log/gnu/packages/irc.scm?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0'>irc.scm</a></div><div class='content'><table class='list nowrap'><tr class='nohover'><th class='left'>Age</th><th class='left'>Commit message (<a href='/guix/log/gnu/packages/irc.scm?id=de98f4ed55a8cd1bc77a63f251eb451d2ef8bbb0&amp;showmsg=1'>Expand</a>)</th><th class='left'>Author</th></tr>
<tr><td><span title='2017-10-22 17:24:33 +0200'>2017-10-22</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=25669275a1a570cc266128274cb27a22f6a3a318'>gnu: irssi: Update to 1.0.5 [security fixes].</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-09-23 18:38:35 +0200'>2017-09-23</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=faccaa8916789d8b69bbbd28aae4e4c0f26ff24c'>gnu: weechat: Update to 1.9.1 [security fix].</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-09-04 22:21:33 +0300'>2017-09-04</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=b82c63d013758fe0e0416b9ff36cb2de18cafa1e'>gnu: quassel: Update package definition.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2017-09-04 11:21:42 +0300'>2017-09-04</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=709a3bb7b8504093aa1c6bef7fd7c5cb07ca5b13'>gnu: weechat: Change to cmake-build-system.</a><span class='msg-avail'>...</span></td><td>Efraim Flashner</td></tr>
<tr><td><span title='2017-09-04 00:10:59 -0400'>2017-09-04</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=d10092b849153dc27cfed0a9601fde6c7bdec918'>gnu: Put autoconf-related phases immediately after the 'unpack phase.</a><span class='msg-avail'>...</span></td><td>Kei Kebreau</td></tr>
<tr><td><span title='2017-08-20 16:41:39 +0200'>2017-08-20</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=3fa1b0821366113cf077385f0180e6071bff4308'>gnu: limnoria: Update to 2017.08.18.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-08-16 22:35:10 +0200'>2017-08-16</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=f886e7cab1c460376f94c785eaacd9d6855d7ea8'>gnu: limnoria: Update to 2017.08.03.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-07-22 20:04:53 -0400'>2017-07-22</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=36378bd57ec31ba2bbedbdbdbd77b5b0f82f3b8a'>gnu: quassel: Enable TLS.</a><span class='msg-avail'>...</span></td><td>Ryan Moe</td></tr>
<tr><td><span title='2017-07-07 12:36:00 -0400'>2017-07-07</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=4909eadfaddc2c072e4aeb50f648110e387f50ac'>gnu: irssi: Update to 1.0.4 [fixes CVE-2017-{10965,10966}].</a><span class='msg-avail'>...</span></td><td>Leo Famulari</td></tr>
<tr><td><span title='2017-06-25 15:33:45 +0200'>2017-06-25</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=fbaed3eaadb458b9cc8b6a83925aaf4beeaa386f'>gnu: weechat: Update to 1.9.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-06-07 00:03:54 +0200'>2017-06-07</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=f608f40c35d37bc41614dfb63f211b6c69137702'>gnu: irssi: Update to 1.0.3.</a><span class='msg-avail'>...</span></td><td>Marius Bakke</td></tr>
<tr><td><span title='2017-05-14 15:06:26 +0200'>2017-05-14</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=b6b281a5ba17b4c774590f68738a77993e7fbabd'>gnu: weechat: Update to 1.8.</a><span class='msg-avail'>...</span></td><td>Tobias Geerinckx-Rice</td></tr>
<tr><td><span title='2017-05-06 16:00:33 +0200'>2017-05-06</span></td><td><a href='/guix/commit/gnu/packages/irc.scm?id=b468f8e0c926aafa1fff0bc8dae08e8b7acec89c'>gnu: limnoria: Update to 20170330.</a><span class='msg-avail'>...</span></td><td>ng0</td></tr>