On Mon, Jul 05, 2004 at 09:04:44PM +0100, Steve Kemp wrote: > Please consider applying the attached patch. This > protects against two (identical) buffer overflows allowing > a local gid(games) attack. > > It's always worth checking over the source to any binaries > you want to install setgid/setuid. > Applied, thanks. New version (atris-1.0.6-2) is available. I'll send the patch to upstream author soon. -- Marcel Sebek jabber: sebek@jabber.cz ICQ: 279852819 linux user number: 307850 GPG ID: 5F88735E GPG FP: 0F01 BAB8 3148 94DB B95D 1FCA 8B63 CA06 5F88 735E
Attachment:
signature.asc
Description: Digital signature