Re: Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8
Willi Mann <[email protected]> Sat, 21 Jan 2017 17:18:58 +0100
| Newsgroups | gmane.comp.log.logwatch.devel |
|---|---|
| Message-ID | <[email protected]> |
Hi, Am 2016-12-28 um 10:09 schrieb Klaus Ethgen: > Package: logwatch > Version: 7.4.3+git20161207-1 > Severity: critical > > Current logwatch did change from sending mails with charset iso-8859-1 > to UTF-8. This openes up a potential security hole as UTF-8 is not able > to display all 8bit data. in order to fix this bug for stretch (next Debian stable release), I will upload a version of logwatch that reverts the change from iso-8859-1 to utf-8 for mails sent by logwatch. This is not my preferred way to fix this issue, but any better fix I can imagine will require some new configuration options, which I don't want to introduce in Debian before they are committed upstream. Bye Willi ------------------------------------------------------------------------------ Check out the vibrant tech community on one of the world's most engaging tech sites, SlashDot.org! http://sdm.link/slashdot