1 |
|
GNATS 4.0.1, November 2004 |
2 |
|
========================== |
3 |
|
|
4 |
|
This is the GNATS 4.0.1 release, a patch release to address a |
5 |
|
potential security vulnerability with string formatting in |
6 |
|
gnats/misc.c that was described in: |
7 |
|
|
8 |
|
http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html |
9 |
|
http://www.zone-h.org/advisories/read/id=4889 |
10 |
|
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623 |
11 |
|
http://www.debian.org/security/2004/dsa-590 |
12 |
|
|
13 |
|
Additional string formatting fixes were applied to avoid buffer |
14 |
|
overflows in constructing formatted date strings. |
15 |
|
|
16 |
|
|
17 |
GNATS 4.0, August 2003 |
GNATS 4.0, August 2003 |
18 |
====================== |
====================== |
19 |
|
|