change note

java/ql/src/change-notes/2023-12-11-environment-variable-injection-query.md

@@ -0,0 +1,5 @@
+---
+category: newQuery
+---
+* Added the `java/exec-tainted-environment` query, to detect the injection of environment variables names or values from remote input.
+