sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Re: [SM-Security] SECURITY UPDATE for net/mtr

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org
Subject: Re: [SM-Security] SECURITY UPDATE for net/mtr
Date: Sat, 11 Dec 2004 12:02:44 -0800

I meant to say PRE_BUILD in the HISTORY entry. Fixed in perforce.

Seth

On Sat, Dec 11, 2004 at 11:56:39AM -0800, Seth Alan Woolley wrote:
> The following files are attached for spell net/mtr:
> DEPENDS
> DETAILS
> HISTORY
> mtr.patch
> PRE_BUILD
>
> ==== //sgl/devel/grimoire/net/mtr/HISTORY#5 -
> /home/seth/sourcemage/devel/net/mtr/HISTORY ====
> 0a1,4
> > 2004-12-11 Seth Woolley <seth AT tautology.org>
> > * BUILD: added mtr.patch SECURITY FIX
> > local privilege escalation, off-by-one bounds checking on key input.
> >

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpHDWpa3uv6X.pgp
Description: PGP signature

[SM-Security] SECURITY UPDATE for net/mtr, Seth Alan Woolley, 12/11/2004
- Re: [SM-Security] SECURITY UPDATE for net/mtr, Seth Alan Woolley, 12/11/2004
- <Possible follow-up(s)>
- [SM-Security] SECURITY UPDATE for net/mtr, Seth Alan Woolley, 12/19/2004