Date: Thu, 8 Jan 2004 18:15:10 -0800 (PST) From: Clement LAFORET <clement@FreeBSD.org> To: ports-committers@FreeBSD.org, cvs-ports@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: ports/news/leafnode Makefile distinfo Message-ID: <200401090215.i092FAGN089945@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
clement 2004/01/08 18:15:10 PST
FreeBSD ports repository
Modified files:
news/leafnode Makefile distinfo
Log:
- Update to 1.9.48
### SECURITY BUGFIX ###
- Fetchnews: when a. minlines=0 (default) and b. delaybody=0 (default) and
either c. no filterfile is configured (default) or a. and b. and d.
article_despite_filter=1 are configured, an article with missing mandatory
headers and without body can hang fetchnews and/or prevent the fetch of
further articles from the current group or server.
Reported by Toni Viemerö, SourceForge bug 873149.
This was a denial-of-service bug, not one that could lead to local or remote
privilege escalation.
PR: 61105
Submitted by: Matthias Andree <matthias.andree@gmx.de>
Approved by: erwin (mentor) (implicitly)
Revision Changes Path
1.45 +1 -1 ports/news/leafnode/Makefile
1.32 +1 -1 ports/news/leafnode/distinfo
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200401090215.i092FAGN089945>