Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 29 Apr 2000 23:22:22 -0700 (PDT)
From:      Kris Kennaway <kris@FreeBSD.org>
To:        Chris Piazza <cpiazza@FreeBSD.org>
Cc:        cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org
Subject:   Re: cvs commit: ports/audio/gnapster Makefile ports/audio/gnapster/files md5 ports/audio/gnapster/pkg DESCR
Message-ID:  <Pine.BSF.4.21.0004292321330.4634-100000@freefall.freebsd.org>
In-Reply-To: <200004300444.VAA96941@freefall.freebsd.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Sat, 29 Apr 2000, Chris Piazza wrote:

>   It is highly recommended that people upgrade to this
>   version.

From the ChangeLog:

 * Security hole fixed that allowed users to view arbitrary files

this is "arbitrary" in the sense of "anything the user can read" since
gnapster is not setuid.

Kris

----
In God we Trust -- all others must submit an X.509 certificate.
    -- Charles Forsythe <forsythe@alum.mit.edu>



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe cvs-all" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0004292321330.4634-100000>