Date: Mon, 02 Oct 2000 23:39:51 +0100 From: Brian Somers <brian@Awfulhak.org> To: Robert Watson <rwatson@FreeBSD.org> Cc: Brian Somers <brian@FreeBSD.org>, cvs-committers@FreeBSD.org, cvs-all@FreeBSD.org, brian@Awfulhak.org Subject: Re: cvs commit: src/usr.bin/finger finger.c Message-ID: <200010022239.e92Mdpn25883@hak.lan.Awfulhak.org> In-Reply-To: Message from Robert Watson <rwatson@FreeBSD.org> of "Mon, 02 Oct 2000 18:29:26 EDT." <Pine.NEB.3.96L.1001002182845.75641D-100000@fledge.watson.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Yes, I just asked security-officer for advice :-/ > We need to release a security advisory for this. It might be worth > rerolling 4.1.1-RELEASE, although maybe that's not possible. > > Robert N M Watson > > robert@fledge.watson.org http://www.watson.org/~robert/ > PGP key fingerprint: AF B5 5F FF A6 4A 79 37 ED 5F 55 E9 58 04 6A B1 > TIS Labs at Network Associates, Safeport Network Services > > On Mon, 2 Oct 2000, Brian Somers wrote: > > > brian 2000/10/02 15:27:34 PDT > > > > Modified files: > > usr.bin/finger finger.c > > Log: > > Don't allow finger /somefile, only allow filname expansions from > > inside /etc/finger.conf > > > > PR: 21704 > > > > Revision Changes Path > > 1.20 +11 -1 src/usr.bin/finger/finger.c -- Brian <brian@Awfulhak.org> <brian@[uk.]FreeBSD.org> <http://www.Awfulhak.org>; <brian@[uk.]OpenBSD.org> Don't _EVER_ lose your sense of humour ! To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe cvs-all" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200010022239.e92Mdpn25883>