[opensuse-factory] Re: [opensuse-packaging] 11.3 is not factory
Hello, 2010-06-29 16:37 keltezéssel, Stephan Kulow írta:
If in doubt, please ask me in IRC and don't worry :)
A libnet related problem came up just this afternoon on the syslog-ng mailing list. It is an UDP checksum calculation bug, which renders a syslog-ng function useless and might also have security implications. The libnet version used in openSUSE (1.1.2.1) is affected, version 1.1.4 is not. I guess, it is too late for a version update, but I was told, that most distributions use this simple fix: http://www.securityfocus.com/archive/89/384197/30/90/threaded Can I still create a patch from the above fix and issue a submit request? Bye, CzP -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
On Tue, Jun 29, 2010 at 10:03:12PM +0200, Peter Czanik wrote:
Hello,
2010-06-29 16:37 keltezéssel, Stephan Kulow írta:
If in doubt, please ask me in IRC and don't worry :)
A libnet related problem came up just this afternoon on the syslog-ng mailing list. It is an UDP checksum calculation bug, which renders a syslog-ng function useless and might also have security implications. The libnet version used in openSUSE (1.1.2.1) is affected, version 1.1.4 is not. I guess, it is too late for a version update, but I was told, that most distributions use this simple fix:
http://www.securityfocus.com/archive/89/384197/30/90/threaded
Can I still create a patch from the above fix and issue a submit request?
Yes. Ciao, Marcus -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org For additional commands, e-mail: opensuse-factory+help@opensuse.org
participants (2)
-
Marcus Meissner -
Peter Czanik