-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Sun, 25 May 2003 18:28:06 -0400 Source: gps Binary: gps rgpsp Architecture: mips Version: 0.9.4-1woody1 Distribution: stable-security Urgency: high Maintainer: Debian/MIPS Build Daemon Changed-By: Matt Zimmerman Description: gps - Graphical PS using GTK rgpsp - Remote gPS poller Changes: gps (0.9.4-1woody1) stable-security; urgency=high . * Non-maintainer upload by the Security Team * Backport security fixes from upstream 1.1.0: - bug fix on rgpsp connection source acceptation policy (it was allowing any host to connect even when the /etc/rgpsp.conf file told otherwise) It is working now, but on any real ("production") network I suggest you use IP filtering to enforce the policy (like ipchains or iptables) - Several possibilities of buffer overflows have been fixed. Thanks to Stanislav Ievlev from ALT-Linux for pointing a lot of them. - fixed misformatting of command line parameters in rgpsp protocol (command lines with newlines would break the protocol) - fixed buffer overflow bug that caused rgpsp to SIGSEGV when stating processes with large command lines (>128 chars) [Linux only] Files: c4f2467fff241ecdc78ff8d225ec8aab 108120 admin optional gps_0.9.4-1woody1_mips.deb 9cabc5e68939c55fc4172719cfc78fa5 24500 admin optional rgpsp_0.9.4-1woody1_mips.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.2.2 (GNU/Linux) iD8DBQE+0ZaTArxCt0PiXR4RAgEiAKCydxLc5rIJTGheQVt40bfzqyDQ2QCghNY+ MnqwkYtKTsjmoNbeP08NqqE= =12oC -----END PGP SIGNATURE-----