* Marc Haber | 2009-07-03 11:25:40 [+0200]:
Can we please get this in lenny?
If upstream plans to do a new release in a reasonably short timeframe,
I'd prefer waiting for the release to stay in sync with upstream.
I remeber that the security team denied this version for Lenny and you
had no
Done, sorry that took so long.
-corey
Sebastian Andrzej Siewior wrote:
* Marc Haber | 2009-07-03 11:25:40 [+0200]:
On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote:
upstream acked my patch and applied a similar one [0] to cvs.
Has your discussion
On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote:
upstream acked my patch and applied a similar one [0] to cvs.
Has your discussion with upstream taken place on a public medium so
that I can read up on it?
Can we please get this in lenny?
If upstream plans to do a new
* Marc Haber | 2009-07-03 11:25:40 [+0200]:
On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote:
upstream acked my patch and applied a similar one [0] to cvs.
Has your discussion with upstream taken place on a public medium so
that I can read up on it?
He was on CC while I
tags 535159 + fixed-upstream
thanks
upstream acked my patch and applied a similar one [0] to cvs.
Can we please get this in lenny?
[0]
http://ser2net.cvs.sourceforge.net/viewvc/ser2net/ser2net/controller.c?r1=1.18r2=1.19
Sebastian
--
To UNSUBSCRIBE, email to
Package: ser2net
Version: 2.5-1
Severity: serious
tags: patch
ser2net provides a control port which may be (ab)used to a segfault via
use after free. The write() handler may catch an error free the
controler struct and continue writting. This leads to another error
(invalid fd) and a free
6 matches
Mail list logo
