Re: Release-critical Bugreport for May 19, 2000

[Adrian Bunk <bunk@fs.tum.de>]

On Fri, 19 May 2000, BugScan reporter wrote:

>...
> Package: qpopper (debian/main)
> Maintainer: Miquel van Smoorenburg <miquels@cistron.nl>
> [REMOVE] at next test cycle, if no fix is available. (RB)
>   63730  [3APA3A@SECURITY.NNOV.RU: unsafe fgets() in qpopper]
>...

This is fixed in qpopper 2.53-4 already in incoming.



Please note that the bug won't be automatically closed after installing
qpopper 2.53-4 because the maintainer used wrong syntax in
debian/changelog:

    * Fix security hole (fixes: #63730). Did not use the patch as supplied
      on bugtraq, but fixed it myself. See debian/fgets1023.patch


cu,
Adrian

-- 
A "No" uttered from deepest conviction is better and greater than a
"Yes" merely uttered to please, or what is worse, to avoid trouble.
                -- Mahatma Ghandi