sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [SMGLSA 2006-18] freeciv: remote denial of service attack

From: "Andraž \"ruskie\" Levstik" <ruskie AT mages.ath.cx>
To: sm-security AT lists.ibiblio.org
Subject: [SM-Security] [SMGLSA 2006-18] freeciv: remote denial of service attack
Date: Sat, 8 Apr 2006 11:21:52 +0200

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Description
- --------------------
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a
denial of service (server crash) via crafted packets with negative compressed
size values.
- --------------------

All users should update freeciv to the latest version using:
- ---------

# scribe update games
# cast -c freeciv

or

# scribe update games
# sorcery queue-security
# cast --queue
- ---------

- --
Andraž "ruskie" Levstik
Source Mage GNU/Linux Games grimoire guru
Geek/Hacker/Tinker

Hacker FAQ: http://www.plethora.net/%7eseebs/faqs/hacker.html

Key id = A7A9E461
Key fingerprint = 757E C16B F5B7 DC27 B003 CCED CF95 3A77 A7A9 E461

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (GNU/Linux)

iD8DBQFEN4FsgrQX1TBnUh4RAsXOAJ95ZncT8DoQeJn5UG7f/CmOdM1BqwCdFSuh
h8sy8h2LDoAQ9bPIIJ/x6OY=
=UXbB
-----END PGP SIGNATURE-----

[SM-Security] [SMGLSA 2006-18] freeciv: remote denial of service attack, Andraž "ruskie" Levstik, 04/08/2006