Re: Bug#849531: Possible security problem, new logwatch sends mails with charset UTF-8

Willi Mann <[email protected]> Sat, 21 Jan 2017 17:18:58 +0100
Newsgroups gmane.comp.log.logwatch.devel
Message-ID <[email protected]>
Hi,

Am 2016-12-28 um 10:09 schrieb Klaus Ethgen:
> Package: logwatch
> Version: 7.4.3+git20161207-1
> Severity: critical
> 
> Current logwatch did change from sending mails with charset iso-8859-1
> to UTF-8. This openes up a potential security hole as UTF-8 is not able
> to display all 8bit data.

in order to fix this bug for stretch (next Debian stable release), I
will upload a version of logwatch that reverts the change from
iso-8859-1 to utf-8 for mails sent by logwatch. This is not my preferred
way to fix this issue, but any better fix I can imagine will require
some new configuration options, which I don't want to introduce in
Debian before they are committed upstream.

Bye
Willi

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot