full-disclosure - [SECURITY] [DSA 139-1] New super packages fix local root exploit

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <200406220939.i5M9dTZe013356@mailserver2.hushmail.com>
From: gobbles at hushmail.com (gobbles@...hmail.com)
Subject: [SECURITY] [DSA 139-1] New super packages fix local root exploit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi max!

Hehehe, not sure what funnier, Debian sta(b)le policy that make GOBBLES
confused about he patching, or fact that took two years after he initial
FULL DISCLOSURE of trivial pre-auth bug to find kindergarten post-auth
bug of many similarity. Good job max, you a hero. It still a mystery!
;PPppPP

Noone think: "hmm, friend GOBBLES, you find many bugs in SUPER program
, it in Error(), maybe do grep style stuff on Error() to see if he
report full QA report?". GOBBLES not sure but think it amusing! ;PPPppP

Love,
GOBBLES2002
GOBBLES@...hmail.com

>>  	error_command =3D NULL;
>>      error_stderr =3D 0;
>> -    Error(0, 0, logbuf);
>> +    Error(0, 0, "%s", logbuf);
>>      error_stderr =3D e;
>>      error_command =3D ec;
-----BEGIN PGP SIGNATURE-----
Note: This signature can be verified at https://www.hushtools.com/verify
Version: Hush 2.4

wkYEARECAAYFAkDX/jEACgkQHNGnlyGZsA/ZbgCeLTUs1jqMFUL6ajczWXXOtKM1Xr4A
oLoYyReXdbyB+RjmvgavfBQr/JFV
=dwaZ
-----END PGP SIGNATURE-----