/[gnats]/gnats/NEWS
ViewVC logotype

Diff of /gnats/NEWS

Parent Directory Parent Directory | Revision Log Revision Log | View Patch Patch

revision 1.6 by chewie, Wed Nov 3 22:02:57 2004 UTC revision 1.7 by chewie, Thu Nov 18 04:22:49 2004 UTC
# Line 1  Line 1 
1  GNATS 4.1, November 2004  GNATS 4.1.0, November 2004
2  ========================  ==========================
3    
4  This is the GNATS 4.1 release, which covers both bugfixes since August  This is GNATS 4.1.0, a development release that incorporates CVS bug fixes and
5  2003 and security fixes for gnatsd and its supporting programs.  In  enhancements that have been committed to CVS taken place over the last year.
6  particular, gnatsd had a candidate for inclusion in the Common  Notable enhancements include:
7  Vulnerabilities and Exposures list at http://cve.mitre.org/,  
8  CAN-2004-0623.  The report can be found in the following locations:  - Update to the libiberty/ directory and supporting functions
9    - Upgrade to autoconf 2.59 generated configure scripts.
10      http://www.zone-h.org/advisories/read/id=4889  - New PR numbers are reported to the client upon new submissions
11      http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html  - Various cleanups and bugfixes.  See the ChangeLog files for details.
12      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623  - Rewrite of install-sid.  Now, rather than editing send-pr, which can be
13      installed on a read-only partition, install-sid creates or edits user or site
14      configuration files ~/.send-pr.conf or /etc/gnats/send-pr.conf.
15    
16    GNATS 4.0.1, November 2004
17    ==========================
18    
19    This is the GNATS 4.0.1 release, a patch release to address a
20    potential security vulnerability with string formatting in
21    gnats/misc.c that was described in:
22    
23      http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html
24      http://www.zone-h.org/advisories/read/id=4889
25      http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623
26      http://www.debian.org/security/2004/dsa-590
27    
28    Additional string formatting fixes were applied to avoid buffer
29    overflows in constructing formatted date strings.
30    
31    
32  GNATS 4.0, August 2003  GNATS 4.0, August 2003

Legend:
Removed from v.1.6  
changed lines
  Added in v.1.7

savannah-hackers-public@gnu.org
ViewVC Help
Powered by ViewVC 1.1.26