1 |
GNATS 4.1, November 2004 |
GNATS 4.1.0, November 2004 |
2 |
======================== |
========================== |
3 |
|
|
4 |
This is the GNATS 4.1 release, which covers both bugfixes since August |
This is GNATS 4.1.0, a development release that incorporates CVS bug fixes and |
5 |
2003 and security fixes for gnatsd and its supporting programs. In |
enhancements that have been committed to CVS taken place over the last year. |
6 |
particular, gnatsd had a candidate for inclusion in the Common |
Notable enhancements include: |
7 |
Vulnerabilities and Exposures list at http://cve.mitre.org/, |
|
8 |
CAN-2004-0623. The report can be found in the following locations: |
- Update to the libiberty/ directory and supporting functions |
9 |
|
- Upgrade to autoconf 2.59 generated configure scripts. |
10 |
http://www.zone-h.org/advisories/read/id=4889 |
- New PR numbers are reported to the client upon new submissions |
11 |
http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html |
- Various cleanups and bugfixes. See the ChangeLog files for details. |
12 |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623 |
- Rewrite of install-sid. Now, rather than editing send-pr, which can be |
13 |
|
installed on a read-only partition, install-sid creates or edits user or site |
14 |
|
configuration files ~/.send-pr.conf or /etc/gnats/send-pr.conf. |
15 |
|
|
16 |
|
GNATS 4.0.1, November 2004 |
17 |
|
========================== |
18 |
|
|
19 |
|
This is the GNATS 4.0.1 release, a patch release to address a |
20 |
|
potential security vulnerability with string formatting in |
21 |
|
gnats/misc.c that was described in: |
22 |
|
|
23 |
|
http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html |
24 |
|
http://www.zone-h.org/advisories/read/id=4889 |
25 |
|
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623 |
26 |
|
http://www.debian.org/security/2004/dsa-590 |
27 |
|
|
28 |
|
Additional string formatting fixes were applied to avoid buffer |
29 |
|
overflows in constructing formatted date strings. |
30 |
|
|
31 |
|
|
32 |
GNATS 4.0, August 2003 |
GNATS 4.0, August 2003 |