Re: [PATCH 2/3] telnet: Fix TTYPE subnegotiation off-by-one error.

Simon Josefsson via Bug reports for the GNU Internet utilities <[email protected]>
Newsgroups gmane.comp.gnu.inetutils.bugs
Message-ID <[email protected]> 
Erik Auerswald <[email protected]> writes:

> Fix off-by-one error in Terminal-Type option subnegotiation if the TERM
> variable has exactly 44 bytes.  In this case the SE byte (end of
> subnegotiation parameters) was replaced by a NUL byte.  This concerns
> the CVE-2019-0053 fixes.  Reported by Erik Auerswald in
> <https://lists.gnu.org/archive/html/bug-inetutils/2022-02/msg00004.html>.

Thank you!

https://git.savannah.gnu.org/cgit/inetutils.git/commit/?id=7aa677948c1d3f26c77f7a30f3c48d0a304595a0

/Simon
signature.asc (application/pgp-signature, 255 B) 
-----BEGIN PGP SIGNATURE-----

iIoEARYIADIWIQSjzJyHC50xCrrUzy9RcisI/kdFogUCYsdkUhQcc2ltb25Aam9z
ZWZzc29uLm9yZwAKCRBRcisI/kdFos3+AQCMeN4+cinJzUakV6ky//r0nGKaWsmw
IyVA+bh92tMYnAD/SUECWQ3ItxXwMkeeX3RfHitS6aAc7cSm6HwTUcejhQA=
=vG+i
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.