gnats - News

GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

Item posted by Chad C. Walstrom <chewie> on Fri 12 Nov 2004 04:46:07 PM UTC.

The GNU GNATS Development Team has released a new version of GNATS, the
Problem Report Management System.  This release,  4.0.1 is a patch                         
release to address a potential security vulnerability with string                          
formatting in gnats/misc.c that was described in:

  http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html                        
  http://www.zone-h.org/advisories/read/id=4889
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623                              
  http://www.debian.org/security/2004/dsa-590                                              
                                                                                           
Additional string formatting fixes were applied to avoid buffer                            
overflows in constructing formatted date strings.

You may download GNATS 4.0.1 from ftp://ftp.gnu.org/pub/gnu/gnats/ or                     
http://savannah.gnu.org/download/gnats (temporarily).

Copyright © 2024 Free Software Foundation, Inc.
Verbatim copying and distribution of this entire article is permitted in any medium, provided this notice is preserved.
The Levitating, Meditating, Flute-playing Gnu logo is a GNU GPL'ed image provided by the Nevrax Design Team.
Page source code