Re: update: security/crack homepage

2006-06-20 Thread Marc Espie
On Mon, Jun 19, 2006 at 03:41:15PM -0700, John Danks wrote: The homepage listed returns 404. This seems to be the correct URL: http://www.crypticide.com/users/alecm/security/ Index: Makefile === RCS file:

Re: mutt in 3.9 and utf-8

2006-06-20 Thread TAKAHASHI Tamotsu
On 6/20/06, Zvezdan Petkovic [EMAIL PROTECTED] wrote: On Mon, Jun 19, 2006 at 07:16:00PM +0900, TAKAHASHI Tamotsu wrote: I guess your two problems are in ncurses. Mutt just uses ncurses' addstr or other functions. But ncurses 5.2 doesn't support UTF-8. IIRC, only libncursesw of ncurses 5.3

Mutt - IMAP NAMESPACE response

2006-06-20 Thread TAKAHASHI Tamotsu
Recently a little vulnerability was found in mutt. ChangeLog in the CVS: * imap/browse.c: Fix browse_get_namespace() which could overflow ns[LONG_STRING]. (Possible remote vulnerability) Be careful if you use an untrusted IMAP server. Propolice protects you from command execution, but a

Re: Mutt - IMAP NAMESPACE response

2006-06-20 Thread Bernd Ahlers
TAKAHASHI Tamotsu [Tue, Jun 20, 2006 at 10:14:30PM +0900] wrote: Recently a little vulnerability was found in mutt. ChangeLog in the CVS: * imap/browse.c: Fix browse_get_namespace() which could overflow ns[LONG_STRING]. (Possible remote vulnerability) Be careful if you use an untrusted IMAP

Re: a question about KDE

2006-06-20 Thread marius
On 6/19/06, marius [EMAIL PROTECTED] wrote: On 6/10/06, Nikolay Sturm [EMAIL PROTECTED] wrote: * Rakhesh Sasidharan [2006-06-10]: and hence easier to maintain? Or is it just that the KDE port maintaners have more time on their hands to keep it updated? Neither KDE, nor GNOME has a proper

NEW: firefox-i18n-1.5.0.4

2006-06-20 Thread Antoine Jacoutot
Language packs for Firefox by MLP. Mozilla Localization Project, abbreviated as MLP, tries to help and ease the availability of mozilla.org products toward different world cultures and languages through the support of the open source community. Tested under amd64. As usual, please test and

Re: NEW: firefox-i18n-1.5.0.4

2006-06-20 Thread Nico Meijer
Hi Antoine, As usual, please test and report... thanks! I briefly tested on i386 with nl: 100%! OpenBSD 3.9-current (GENERIC) #896: Sun Jun 18 11:31:28 MDT 2006 Thanks... Nico

Re: mutt in 3.9 and utf-8

2006-06-20 Thread Zvezdan Petkovic
On Tue, Jun 20, 2006 at 09:54:50PM +0900, TAKAHASHI Tamotsu wrote: If a whole line is output at once (as by more), it will be shown correctly. But ncurses doesn't always updates every whole line. For example, if mutt tries to show abcdef on a line where previously contains ab, ncurses will

Re: license question

2006-06-20 Thread Christian Weisgerber
Jakob Schlyter [EMAIL PROTECTED] wrote: README-SenderID from the sid-milter says: This source code may incorporate intellectual property owned by Microsoft Corporation that is necessary to implement the IETF Sender ID Specification. I understand this to refer to a patent. the

Re: darkstat -- out of bounds access

2006-06-20 Thread Chris Kuethe
On 6/19/06, Moritz Grimm [EMAIL PROTECTED] wrote: Jasper Lievisse Adriaanse wrote: Thanks for reporting, I haven't been able to reproduce this crash (also tun0), but could you please try this diff? It takes a while, and maybe also a noisy network. I've now started another test run with your

Re: darkstat -- out of bounds access

2006-06-20 Thread Chris Kuethe
Patch adds -d to daemonize, causes the sniffer process to chroot to /var/empty and setuid to nobody. I should probably make it setuid to _darkstat, but since there's nothing on my soekris that nobody has privileges to, i don't feel to bad about it. -- GDB has a 'break' feature; why doesn't it

Re: darkstat -- out of bounds access

2006-06-20 Thread Chris Kuethe
On 6/19/06, Moritz Grimm [EMAIL PROTECTED] wrote: P.S.: A new port without a MAINTAINER? (No, I'm not volunteering ... it was fun while it lasted, but I really don't need it.) I'll take this one - I'm working with the author now, to get privilege dropping integrated. That whole