Bug 61105 - [MAINTAINER] news/leafnode: SECURITY update to 1.9.48
Summary: [MAINTAINER] news/leafnode: SECURITY update to 1.9.48
Status: Closed FIXED
Alias: None
Product: Ports & Packages
Classification: Unclassified
Component: Individual Port(s) (show other bugs)
Version: Latest
Hardware: Any Any
: Normal Affects Only Me
Assignee: freebsd-ports-bugs (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2004-01-09 02:00 UTC by Matthias Andree
Modified: 2004-01-09 02:15 UTC (History)
0 users

See Also:


Attachments
leafnode-1.9.48.patch (815 bytes, patch)
2004-01-09 02:00 UTC, Matthias Andree
no flags Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Matthias Andree 2004-01-09 02:00:34 UTC
- Update to 1.9.48, security fixes inside.

Upstream NEWS:

### SECURITY BUGFIX
- Fetchnews: when a. minlines=0 (default) and b. delaybody=0 (default) and
  either c. no filterfile is configured (default) or a. and b. and d.
  article_despite_filter=1 are configured, an article with missing mandatory
  headers and without body can hang fetchnews and/or prevent the fetch of
  further articles from the current group or server.
  Reported by Toni Viemerö, SourceForge bug 873149.
  This was a denial-of-service bug, not one that could lead to local or remote
  privilege escalation.

### BUGFIX
- Fetchnews: log group name when articles are skipped that match the minlines,
  maxlines, maxbytes or age filters, for more consistent logging.

### CHANGES
- Rebuilt with autoconf 2.59.

Generated with FreeBSD Port Tools 0.50
Comment 1 Clement Laforet freebsd_committer freebsd_triage 2004-01-09 02:15:23 UTC
State Changed
From-To: open->closed

Committed, thanks !