Preparing 4.0.1: Patch release of 4.0
Chad Walstrom <[email protected]> Wed, 10 Nov 2004 10:49:43 -0600
| Newsgroups | gmane.comp.bug-tracking.gnats.bugs |
|---|---|
| Message-ID | <[email protected]> |
--===============0923070019== Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="wtjvnLv0o8UUzur2" Content-Disposition: inline --wtjvnLv0o8UUzur2 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Chad Walstrom wrote: > I will be releasing a patch and updating our website later today (I > have a day off from work), and making an announcement on info-gnats. So, rather than waiting for me to track down the optimization bug with libiberty and releasing 4.1, I've branched the 4.0 release to gnats-4_0-patches. So far, I've rolled in the following string formatting changes to misc.c: 2004-09-06 Hans-Albert Schneider <[email protected]> * misc.c (gnats_strftime): If we have to interpret %z ourselves, avoid a buffer overflow with 10 or more %z in format string. (log_msg): Fix format string bug (in calling syslog()) described in http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html and in http://www.zone-h.org/advisories/read/id=3D4889 2004-06-11 Jon Meredith <[email protected]> * misc.c (gnats_strftime): added check for +/- at the start of the string to support SCO OpenServer. The undocumented %z does not have a '+' on for positive offsets, so the return from get_curr_date() cannot be parsed by get_date(). (Closes: patch #1461) I don't see any more potential security problems listed in the ChangeLog's. I plan on tagging this change as the 4.0.1 release. If you know of any other changes that should absolutely be included in this release, let me know ASAP. --=20 Chad Walstrom <[email protected]> http://www.wookimus.net/ assert(expired(knowledge)); /* core dump */ --wtjvnLv0o8UUzur2 Content-Type: application/pgp-signature; name="signature.asc" Content-Description: Digital signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.4 (GNU/Linux) iD8DBQFBkkanDMcLGCBsWv0RAnXCAJ9k97/O6Iy7fuJ2oaaCPnAjOWslLQCgpA52 YaE3ktyEwAG3YyERgeCVaAc= =Gb/3 -----END PGP SIGNATURE----- --wtjvnLv0o8UUzur2-- --===============0923070019== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Bug-gnats mailing list [email protected] http://lists.gnu.org/mailman/listinfo/bug-gnats --===============0923070019==--