newsgnats - News: GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

 
 
Latest News
GNU GNATS posted by chewie, Sat Feb 28 19:01:01 2015 - 0 replies
GNATS 4.1.0 Released! posted by chewie, Sun Mar 6 21:20:40 2005 - 0 replies
4.1.0 Release Candidate: gnats-4_1_0-rc2 posted by chewie, Mon Feb 28 17:35:00 2005 - 0 replies
GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability posted by chewie, Fri Nov 12 16:46:07 2004 - 0 replies
GNATS 4.0 released posted by andrewg, Fri Aug 1 02:54:01 2003 - 0 replies
[Submit News]
[7 news in archive]

GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

Item posted by Chad C. Walstrom <chewie> on Fri Nov 12 16:46:07 2004.

The GNU GNATS Development Team has released a new version of GNATS, the
Problem Report Management System. This release, 4.0.1 is a patch
release to address a potential security vulnerability with string
formatting in gnats/misc.c that was described in:

http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html
http://www.zone-h.org/advisories/read/id=4889
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623
http://www.debian.org/security/2004/dsa-590

Additional string formatting fixes were applied to avoid buffer
overflows in constructing formatted date strings.

You may download GNATS 4.0.1 from ftp://ftp.gnu.org/pub/gnu/gnats/ or
http://savannah.gnu.org/download/gnats (temporarily).

Comments:

No messages in GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

 

Back to the top


Powered by Savane 3.1-cleanup