sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] Fcron non-exploitable buffer overflow

From: "Andrew \"ruskie\" Levstik" <ruskie AT mages.ath.cx>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] Fcron non-exploitable buffer overflow
Date: Tue, 7 Feb 2006 09:29:15 +0100

This release has several bugfixes, especially for BSD systems. The man pages
have been
translated to French. Please note that a buffer overflow was been found in
the program
convert-fcrontab, which is part of fcron 3.0.0. It seems that this bug is not
exploitable,
but it is safer to upgrade to 3.0.1 (which includes a fix for this bug) as
soon as possible.

-----
All fcron users should(delay for grimoire tarball generation):
# scribe update
# cast -c fcron

or

# scribe update
# sorcery queue-security
# cast --queue

--
Andrew "ruskie" Levstik
Source Mage GNU/Linux Games grimoire guru
Geek/Hacker/Tinker

Hacker FAQ: http://www.plethora.net/%7eseebs/faqs/hacker.html

Key id = A7A9E461
Key fingerprint = 757E C16B F5B7 DC27 B003 CCED CF95 3A77 A7A9 E461

[SM-Security] Fcron non-exploitable buffer overflow, Andrew "ruskie" Levstik, 02/07/2006