Bug#535159: ser2net: fix use after in control port handling

2010-08-10 Thread Sebastian Andrzej Siewior
* Marc Haber | 2009-07-03 11:25:40 [+0200]: >> Can we please get this in lenny? > >If upstream plans to do a new release in a reasonably short timeframe, >I'd prefer waiting for the release to stay in sync with upstream. I remeber that the security team denied this version for Lenny and you had n

Bug#535159: ser2net: fix use after in control port handling

2009-07-15 Thread Corey Minyard
Done, sorry that took so long. -corey Sebastian Andrzej Siewior wrote: * Marc Haber | 2009-07-03 11:25:40 [+0200]: On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote: upstream acked my patch and applied a similar one [0] to cvs. Has your discussion with

Bug#535159: ser2net: fix use after in control port handling

2009-07-03 Thread Sebastian Andrzej Siewior
* Marc Haber | 2009-07-03 11:25:40 [+0200]: >On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote: >> upstream acked my patch and applied a similar one [0] to cvs. > >Has your discussion with upstream taken place on a public medium so >that I can read up on it? He was on CC wh

Bug#535159: ser2net: fix use after in control port handling

2009-07-03 Thread Marc Haber
On Thu, Jul 02, 2009 at 10:02:56PM +0200, Sebastian Andrzej Siewior wrote: > upstream acked my patch and applied a similar one [0] to cvs. Has your discussion with upstream taken place on a public medium so that I can read up on it? > Can we please get this in lenny? If upstream plans to do a ne

Bug#535159: ser2net: fix use after in control port handling

2009-07-02 Thread Sebastian Andrzej Siewior
tags 535159 + fixed-upstream thanks upstream acked my patch and applied a similar one [0] to cvs. Can we please get this in lenny? [0] http://ser2net.cvs.sourceforge.net/viewvc/ser2net/ser2net/controller.c?r1=1.18&r2=1.19 Sebastian -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.

Bug#535159: ser2net: fix use after in control port handling

2009-06-30 Thread Sebastian Andrzej Siewior
Package: ser2net Version: 2.5-1 Severity: serious tags: patch ser2net provides a control port which may be (ab)used to a segfault via use after free. The write() handler may catch an error free the controler struct and continue writting. This leads to another error (invalid fd) and a free & cleanu