Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-30 Thread Moritz Mühlenhoff
On Fri, Jan 30, 2015 at 11:17:49AM +0100, Axel Beckert wrote: > Hi Moritz, > > Moritz Mühlenhoff wrote: > > On Tue, Jan 27, 2015 at 12:34:09PM +0100, Axel Beckert wrote: > > > Moritz Mühlenhoff wrote: > > > > I think it's sufficient if we fix this in a point update, can you take > > > > care of th

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-30 Thread Axel Beckert
Hi Moritz, Moritz Mühlenhoff wrote: > On Tue, Jan 27, 2015 at 12:34:09PM +0100, Axel Beckert wrote: > > Moritz Mühlenhoff wrote: > > > I think it's sufficient if we fix this in a point update, can you take > > > care of that? > > > > Do you think of Jessie or Wheezy? As far as I can see, Wheezy i

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-27 Thread Moritz Mühlenhoff
On Tue, Jan 27, 2015 at 12:34:09PM +0100, Axel Beckert wrote: > Hi Moritz, > > Moritz Mühlenhoff wrote: > > I think it's sufficient if we fix this in a point update, can you take > > care of that? > > Do you think of Jessie or Wheezy? As far as I can see, Wheezy is > not affected: > https://sourc

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-27 Thread Axel Beckert
Hi Moritz, Moritz Mühlenhoff wrote: > I think it's sufficient if we fix this in a point update, can you take > care of that? Do you think of Jessie or Wheezy? As far as I can see, Wheezy is not affected: https://sources.debian.net/src/xymon/4.3.0%7Ebeta2.dfsg-9.1/web/bb-ack.c/#L248 > Has this be

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-27 Thread Moritz Mühlenhoff
On Thu, Jan 22, 2015 at 06:00:54PM +0100, Christoph Berg wrote: > Re: To Debian Bug Tracking System 2015-01-22 > <20150122161925.ga23...@msg.df7cb.de> > > Source: xymon > > Version: 4.3.17-1 > > Severity: grave > > Tags: security patch pending > > > > web/acknowledge.c uses a string twice in a fo

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-22 Thread Christoph Berg
Re: To Debian Bug Tracking System 2015-01-22 <20150122161925.ga23...@msg.df7cb.de> > Source: xymon > Version: 4.3.17-1 > Severity: grave > Tags: security patch pending > > web/acknowledge.c uses a string twice in a format string, but only > allocates memory for one copy. The attached patch fixes

Bug#776007: buffer overrun in acknowledge.c(gi)

2015-01-22 Thread Christoph Berg
Source: xymon Version: 4.3.17-1 Severity: grave Tags: security patch pending web/acknowledge.c uses a string twice in a format string, but only allocates memory for one copy. The attached patch fixes this. Christoph -- c...@df7cb.de | http://www.df7cb.de/ --- a/web/acknowledge.c +++ b/web/acknow