[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[leafnode-list] WARNING: leafnode-2.0b4, 2.0b5, 2.0b5-ma1 syslog bugs
-----BEGIN PGP SIGNED MESSAGE-----
Matthias Andree <ma@xxxxxxxxxxxxxxxxxxxxxxxxxxxx> writes:
> I merged my 2.0b3 diffs except the TRUE -> 1 diffs and released
> 2.0b5-ma1.
During compiling on FreeBSD 4, I found some security relevant problems
in 2.0b5-ma1 that are also present in 2.0b3-jd1-ma1, 2.0b4 and
2.0b5. These are a possible unsecure use of tmpnam in rnews.c that I'm
auditing and format string vulnerabilities in syslog that FreeBSD's
header files caught. I LOVE proper header files.
I'm currently examining leafnode 2.0b5-ma1 for further vulnerabilities
and portability problems and bugfixing, I'll release 2.0b5-ma2 pretty
soon.
- --
Matthias Andree
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.4 (GNU/Linux)
Comment: Processed by Mailcrypt 3.5.5 and Gnu Privacy Guard <http://www.gnupg.org/>
iQCVAwUBOg8lrSdEoB0mv1ypAQGanwP/aAE8SjHGXb8NWhulyjQaMrJ/31PtauvA
rjXEATEqcDo/Yd8ZSFs7ytZIiC1hdtDrHbgoDnsCOOfwW1oICbLsf3t1gR02QEjL
qwv422ib+wz6Oue1h3zqBxEBmVymvAbOBuuJMEjTIxtXSKe1xOpHd9d16Jv5Mo7e
2XnCzKzpxCo=
=/yUd
-----END PGP SIGNATURE-----
--
leafnode-list@xxxxxxxxxxxxxxxxxxxxxxxxxxxx -- mailing list for leafnode
To unsubscribe, send mail with "unsubscribe" in the subject to the list