newsgnats - News: GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

 
 
Latest News
GNU GNATS posted by chewie, Sat 28 Feb 2015 07:01:01 PM UTC
GNATS 4.1.0 Released! posted by chewie, Sun 06 Mar 2005 09:20:40 PM UTC
4.1.0 Release Candidate: gnats-4_1_0-rc2 posted by chewie, Mon 28 Feb 2005 05:35:00 PM UTC
GNATS 4.0 released posted by andrewg, Fri 01 Aug 2003 02:54:01 AM UTC

GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability

Item posted by Chad C. Walstrom <chewie> on Fri 12 Nov 2004 04:46:07 PM UTC.

The GNU GNATS Development Team has released a new version of GNATS, the
Problem Report Management System.  This release,  4.0.1 is a patch                         
release to address a potential security vulnerability with string                          
formatting in gnats/misc.c that was described in:

  http://lists.gnu.org/archive/html/bug-gnats/2004-06/msg00028.html                        
  http://www.zone-h.org/advisories/read/id=4889
  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0623                              
  http://www.debian.org/security/2004/dsa-590                                              
                                                                                           
Additional string formatting fixes were applied to avoid buffer                            
overflows in constructing formatted date strings.

You may download GNATS 4.0.1 from ftp://ftp.gnu.org/pub/gnu/gnats/ or                     
http://savannah.gnu.org/download/gnats (temporarily).

 

Back to the top

Powered by Savane 3.13-f8d8.
Corresponding source code