Re: Buffer overflow in the StringQuotedWord() function
Jeffrey Kingston <[email protected]> Tue, 20 Oct 2020 23:52:28 +0000
| Newsgroups | gmane.comp.type-setting.lout |
|---|---|
| Message-ID | <SYCPR01MB39831391DEE93A197B2578E8C41F0@SYCPR01MB3983.ausprd01.prod.outlook.com> |
--_000_SYCPR01MB39831391DEE93A197B2578E8C41F0SYCPR01MB3983ausp_ Content-Type: text/plain; charset="windows-1250" Content-Transfer-Encoding: quoted-printable > Is anyone still maintaining lout? I'm still around but I see little point in making new versions of Lout at this late stage. So I guess I'm saying that I'm not maintaining Lout any longer. If something serious turned up I suppose I would gird my loins and fix it, but that's very unlikely. Jeff Kingston ________________________________ From: Lout-users on behalf of Mat=ECj Cepl Sent: Wednesday, October 21, 2020 2:20 AM To: William Bader; Frederic Cambus; [email protected] Subject: Re: Buffer overflow in the StringQuotedWord() function William Bader p=ED=9Ae v So 21. 12. 2019 v 11:59 +0000: > Is anyone still maintaining lout? That=92s the question, isn=92t it? We have in OpenSUSE still two opened CVEs (https://bugzilla.suse.com/1159713 and https://bugzilla.suse.com/1159714), Debian just removed lout from its archive (https://bugs.debian.org/972182). Is the project finally dead, and should I remove the package from OpenSUSE as well (and Fedora, where I am a maintainer too)? Best, Mat=ECj Cepl -- https://matej.ceplovi.cz/blog/, Jabber: [email protected] GPG Finger: 3C76 A027 CA45 AD70 98B5 BC1D 7920 5802 880B C9D8 This message has been composed of recycled electrons. None of these electrons has been harmed or injured in the creation and transmission of this message but they have been shamelessly exploited for this use. --_000_SYCPR01MB39831391DEE93A197B2578E8C41F0SYCPR01MB3983ausp_ Content-Type: text/html; charset="windows-1250" Content-Transfer-Encoding: quoted-printable <html> <head> <meta http-equiv=3D"Content-Type" content=3D"text/html; charset=3Dwindows-1= 250"> <style type=3D"text/css" style=3D"display:none;"> P {margin-top:0;margin-bo= ttom:0;} </style> </head> <body dir=3D"ltr"> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> <font size=3D"2"><span style=3D"font-size:11pt">> Is anyone still mainta= ining lout?</span></font></div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> I'm still around but I see little point in making new versions of Lout</div= > <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> at this late stage. So I guess I'm saying that I'm not maintaining</d= iv> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> Lout any longer. If something serious turned up I suppose I</div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> would gird my loins and fix it, but that's very unlikely.</div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> <br> </div> <div style=3D"font-family: Calibri, Arial, Helvetica, sans-serif; font-size= : 12pt; color: rgb(0, 0, 0);"> Jeff Kingston<br> </div> <div> <div><br> </div> <div style=3D"font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12p= t; color:rgb(0,0,0);"> <br> <hr tabindex=3D"-1" style=3D"display:inline-block; width:98%;"> <b>From:</b> Lout-users on behalf of Mat=ECj Cepl<br> <b>Sent:</b> Wednesday, October 21, 2020 2:20 AM<br> <b>To:</b> William Bader; Frederic Cambus; [email protected]<br> <b>Subject:</b> Re: Buffer overflow in the StringQuotedWord() function <div><br> </div> </div> <div class=3D"BodyFragment"><font size=3D"2"><span style=3D"font-size:11pt;= "> <div class=3D"PlainText">William Bader p=ED=9Ae v So 21. 12. 2019 v 11:59 += 0000:<br> > Is anyone still maintaining lout?<br> <br> That=92s the question, isn=92t it? We have in OpenSUSE still two <br> opened CVEs (https://bugzilla.suse.com/1159713 and<br> <a href=3D"https://bugzilla.suse.com/1159714" target=3D"_blank" rel=3D"noop= ener noreferrer" data-auth=3D"NotApplicable">https://bugzilla.suse.com/1159= 714</a>), Debian just removed lout <br> from its archive (<a href=3D"https://bugs.debian.org/972182" target=3D"_bla= nk" rel=3D"noopener noreferrer" data-auth=3D"NotApplicable">https://bugs.de= bian.org/972182</a>).<br> <br> Is the project finally dead, and should I remove the package <br> from OpenSUSE as well (and Fedora, where I am a maintainer too)?<br> <br> Best,<br> <br> Mat=ECj Cepl<br> <br> -- <br> <a href=3D"https://matej.ceplovi.cz/blog/" target=3D"_blank" rel=3D"noopene= r noreferrer" data-auth=3D"NotApplicable">https://matej.ceplovi.cz/blog/</a= >, Jabber: [email protected]<br> GPG Finger: 3C76 A027 CA45 AD70 98B5 BC1D 7920 5802 880B C9D8<br> <br> This message has been composed of recycled electrons. None of<br> these electrons has been harmed or injured in the creation and<br> transmission of this message but they have been shamelessly<br> exploited for this use.<br> <br> </div> </span></font></div> </div> </body> </html> --_000_SYCPR01MB39831391DEE93A197B2578E8C41F0SYCPR01MB3983ausp_--