newsgnats - News: GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

 
 
Latest News
GNATS 4.1.0 Released! posted by chewie, Sun 06 Mar 2005 09:20:40 PM UTC - 0 replies
4.1.0 Release Candidate: gnats-4_1_0-rc2 posted by chewie, Mon 28 Feb 2005 05:35:00 PM UTC - 0 replies
GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability posted by chewie, Fri 12 Nov 2004 04:46:07 PM UTC - 0 replies
GNATS 4.0 released posted by andrewg, Fri 01 Aug 2003 02:54:01 AM UTC - 0 replies
GNU GNATS 4.0 beta1 released posted by pdm, Fri 11 Jan 2002 11:16:53 PM UTC - 3 replies
[Submit News]
[6 news in archive]

GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

Item posted by Chad C. Walstrom <chewie> on Fri 12 Nov 2004 04:46:07 PM UTC.

The GNU GNATS Development Team has released a new version of GNATS, the
Problem Report Management System. This release, 4.0.1 is a patch
release to address a potential security vulnerability with string
formatting in gnats/misc.c that was described in:

http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html
http://www.zone-h.org/advisories/read/id=4889
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623
http://www.debian.org/security/2004/dsa-590

Additional string formatting fixes were applied to avoid buffer
overflows in constructing formatted date strings.

You may download GNATS 4.0.1 from ftp://ftp.gnu.org/pub/gnu/gnats/ or
http://savannah.gnu.org/download/gnats (temporarily).

Comments:

No messages in GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

 

Back to the top


Powered by Savane 3.1-cleanup