gnats - News
GNATS Release: 4.0.1 -- Fixes Potential Security Vulnerability
Item posted by Chad C. Walstrom <chewie> on Fri 12 Nov 2004 04:46:07 PM UTC.
The GNU GNATS Development Team has released a new version of GNATS, the
Problem Report Management System. This release, 4.0.1 is a patch
release to address a potential security vulnerability with string
formatting in gnats/misc.c that was described in:
http://lists.gnu. ... -06/msg00028.html
http://www.zone-h ... ries/read/id=4889
http://cve.mitre. ... ame=CAN-2004-0623
http://www.debian ... rity/2004/dsa-590
Additional string formatting fixes were applied to avoid buffer
overflows in constructing formatted date strings.
You may download GNATS 4.0.1 from ftp://ftp.gnu.o ... /pub/gnu/gnats/ or
http://savannah.g ... rg/download/gnats (temporarily).
Powered by Savane 3.16-11ef.
Corresponding source code
