Re: [SECUNIA] Question regarding reported vulnerability in log_msg() in misc.c

--===============2050880065==
Content-Type: multipart/signed; micalg=pgp-sha1;
	protocol="application/pgp-signature"; boundary="tVmo9FyGdCe4F4YN"
Content-Disposition: inline


--tVmo9FyGdCe4F4YN
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Carsten H. Eiram wrote:
> http://marc.theaimsgroup.com/?l=3Dbugtraq&m=3D108820000823191&w=3D2
> ...
> http://www.debian.org/security/2004/dsa-590
> ...
> However, to ensure that the information in our advisory is as correct
> as possible, we would appreciate your thoughts on how this issue can
> be exploited, by whom, and when you are planning to release a patch.

I will be releasing a patch and updating our website later today (I have
a day off from work), and making an announcement on info-gnats.

I should have done this long ago.  We have Hans-Albert Schneider
<[email protected]> to thank for committing the fix in CVS on
2004-09-06.


--=20
Chad Walstrom <[email protected]>           http://www.wookimus.net/
           assert(expired(knowledge)); /* core dump */

--tVmo9FyGdCe4F4YN
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)

iD8DBQFBkj7aDMcLGCBsWv0RAh5GAKCSKsw7zyeCIgRUomC5wQGGl59e/ACfbpG9
WmKWg/r6ZO53GlB5PLKKp3M=
=Zr3h
-----END PGP SIGNATURE-----

--tVmo9FyGdCe4F4YN--



--===============2050880065==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Bug-gnats mailing list
[email protected]
http://lists.gnu.org/mailman/listinfo/bug-gnats

--===============2050880065==--