cab-0.2.23: ChangeLog.md

# ChangeLog for cab

## 0.2.23

* Security: external commands (`ghc-pkg`, `ghci`, `cabal`) are now
  invoked with argument lists instead of a shell. Previously, a crafted
  `package-db:` in a `cabal.sandbox.config` of the current or any
  ancestor directory could execute arbitrary shell commands via
  `cab check`, `cab uninstall` and `cab ghci`.
* New: `getSandboxOptsList` in `Distribution.Cab.Sandbox`.