From 8308c170dbf7f1c998ca0cb3b1ce7d21712a9f08 Mon Sep 17 00:00:00 2001 From: Alexander Barton Date: Thu, 3 Feb 2005 09:26:42 +0000 Subject: Fixed a bug that could case a root exploit when the daemon is compiled to do IDENT lookups and is logging to syslog. Bug discovered by CoKi, , thanks a lot! (http://www.nosystem.com.ar/advisories/advisory-11.txt) --- ChangeLog | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) (limited to 'ChangeLog') diff --git a/ChangeLog b/ChangeLog index 98970049..340ae6bf 100644 --- a/ChangeLog +++ b/ChangeLog @@ -12,6 +12,10 @@ ngIRCd CVSHEAD + - Fixed a bug that could case a root exploit when the daemon is compiled + to do IDENT lookups and is logging to syslog. Bug discovered by CoKi, + , thanks a lot! + (http://www.nosystem.com.ar/advisories/advisory-11.txt) - Code cleanups from Florian Westphal, . - Raised the maximum length of passwords to 20 characters. - Fixed a memory leak when resizing the connection pool and realloc() @@ -28,7 +32,7 @@ ngIRCd CVSHEAD should enable the system to write proper core files when not running with root privileges ... -ngircd 0.8.2 (2005-01-26) +ngIRCd 0.8.2 (2005-01-26) - Added doc/SSL.txt to distribution. - Fixed a buffer overflow that could cause the daemon to crash. Bug found @@ -572,4 +576,4 @@ ngIRCd 0.0.1, 31.12.2001 -- -$Id: ChangeLog,v 1.256 2005/02/03 09:11:43 alex Exp $ +$Id: ChangeLog,v 1.257 2005/02/03 09:26:42 alex Exp $ -- cgit 1.4.1