https://bugzilla.novell.com/show_bug.cgi?id=649515 https://bugzilla.novell.com/show_bug.cgi?id=649515#c0 Summary: new monotone-0.48.1 release available which fixes possible server DOS Classification: openSUSE Product: openSUSE 11.3 Version: Final Platform: All OS/Version: openSUSE 11.3 Status: NEW Severity: Critical Priority: P5 - None Component: Security AssignedTo: security-team@suse.de ReportedBy: me@thomaskeller.biz QAContact: qa@suse.de Found By: --- Blocker: --- User-Agent: Mozilla/5.0 (X11; Linux i686; rv:2.0b6) Gecko/20100101 Firefox/4.0b6 The monotone team recently released 0.48.1 of its VCS (http://www.thomaskeller.biz/blog/2010/10/22/monotone-0-48-1-released-please-...) which fixes a problem in the program's command line parsing that can be used to crash remote servers. I already prepared a SR for this (51291) - this SR contains another change, namely SQLite 3.7.x compatibility - which however does nota affect oS 11.3, but only later versions. Reproducible: Always Steps to Reproduce: 1. 2. 3. -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.