Package: openfortivpn Version: 1.14.0-1 Severity: wishlist -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256
I realize it's only been out a week, but the change has at least potential security implications. diff --git a/src/ipv4.c b/src/ipv4.c index 9191f00..91ff763 100644 - --- a/src/ipv4.c +++ b/src/ipv4.c @@ -1063,10 +1063,10 @@ int ipv4_add_nameservers_to_resolv_conf(struct tunnel *tunnel) int ret = -1; FILE *file; struct stat stat; - -#define NS_SIZE ARRAY_SIZE("nameserver xxx.xxx.xxx.xxx") +#define NS_SIZE ARRAY_SIZE("nameserver xxx.xxx.xxx.xxx\n") char ns1[NS_SIZE], ns2[NS_SIZE]; #undef NS_SIZE - -#define DNS_SUFFIX_SIZE (ARRAY_SIZE("search ") + MAX_DOMAIN_LENGTH) +#define DNS_SUFFIX_SIZE (ARRAY_SIZE("search \n") + MAX_DOMAIN_LENGTH) char dns_suffix[DNS_SUFFIX_SIZE]; #undef DNS_SUFFIX_SIZE char *buffer = NULL; cheers, d - -- System Information: Debian Release: bullseye/sid APT prefers unstable-debug APT policy: (500, 'unstable-debug'), (500, 'testing-debug'), (500, 'testing') Architecture: amd64 (x86_64) Foreign Architectures: i386 Kernel: Linux 5.6.0-1-amd64 (SMP w/8 CPU cores) Kernel taint flags: TAINT_OOT_MODULE, TAINT_UNSIGNED_MODULE Locale: LANG=en_CA.UTF-8, LC_CTYPE=en_CA.UTF-8 (charmap=UTF-8), LANGUAGE=en_CA:en (charmap=UTF-8) Shell: /bin/sh linked to /bin/dash Init: systemd (via /run/systemd/system) LSM: AppArmor: enabled Versions of packages openfortivpn depends on: ii libc6 2.30-8 ii libssl1.1 1.1.1g-1 ii libsystemd0 245.5-3 ii ppp 2.4.7-2+4.1+deb10u1 openfortivpn recommends no packages. openfortivpn suggests no packages. - -- Configuration Files: /etc/openfortivpn/config [Errno 13] Permission denied: '/etc/openfortivpn/config' - -- no debconf information -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEEkiyHYXwaY0SiY6fqA0U5G1WqFSEFAl7PwI4ACgkQA0U5G1Wq FSFe5w//SspLBLQXktakzaRNpUtA59AhMgioKrvhamAKUaDjhn4JTtwjyNcF7rDh hmHg4QoMEZXUti0AvW8Wk9n4x1ZYC0g8l5SiprCNes6PPRmPwJxpSVAowbQAwVYI H84pWSCiM4mn/EXitIJ9tRu+3wfh521q6sO+mPTR+icaM5S3PxzEZdlFTHg3bXi9 zmC0IvijTMKf3XfWXflB1gBVB/doiJJ3hzNZaBl+AJK946YR/Plb8oX9FXQKRJ8s PCE2NggG3NxcnY65sYv+k1zWFR69wP19UY8T8uYQQknYCL18Y7rzqIPseNtPSyZ+ Smy4UoZQn6+5euPe+veqbLt4i0AuywdSmiuLvMKHqb0PtBCz/7RmylM88etz6pyM yWQqmb8p3RgfeAALtlRIMUB1lJRMoTHDBdIc+RHsEI5IPwhTdarZsAd7PW4sdNdN MnNYocQhAFDE6iHopKw1tjt7r/hvIYcZz3whMjvxhdmu95q9CfB5Y5SqPN7Pj0FG 5BNb+42ffhKuKIsdvwkxji0K8VuURwmDsNhfN3HwJagTbdKGUUX+FKr0KdeH1e70 5gKt1k5eIh/BoLizKYvRgKtvfEMooS5+mNutQRkVJm+MbzyTFk8CzntOUBgupqb3 d5hr03A+z4JeyxnTx7/vSK+BqjL/asOoCwtObLHGTV7qy7f7AEk= =mosx -----END PGP SIGNATURE-----