Date: Fri, 02 Dec 2022 15:42:32 +0000 From: bugzilla-noreply@freebsd.org To: ports-bugs@FreeBSD.org Subject: [Bug 268128] net/gmid: update to 1.8.6 Message-ID: <bug-268128-7788-dU9eVTTYgI@https.bugs.freebsd.org/bugzilla/> In-Reply-To: <bug-268128-7788@https.bugs.freebsd.org/bugzilla/> References: <bug-268128-7788@https.bugs.freebsd.org/bugzilla/>
next in thread | previous in thread | raw e-mail | index | archive | help
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=3D268128 --- Comment #1 from Omar Polo <freebsd@omarpolo.com> --- ooops, hit enter too fast. (hate these web uis...) Here's a diff to update net/gmid to its latest version, 1.8.6. it fixes a use after free in the fastcgi code. The full changelog is: - add tests and compat for setresuid setresgid - add GEMINI_SEARCH_STRING fastcgi parameter / cgi env variable - manpage fix: QUERY_STRING is *not* urldecoded - fixed use-after-free in the fastcgi code - when switching user also set the groups - always cast is*() arguments to unsigned char Thanks, Omar Polo --=20 You are receiving this mail because: You are the assignee for the bug.=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?bug-268128-7788-dU9eVTTYgI>