Philipp Kern | 1 Nov 2011 19:15
Picon

[Release] net6 1.3.14

Dear Gobby users,

a new net6 version has been released.  It contains a reliability fix and
one against an information leak.  Please note that because of the use
of C++ templates Gobby 0.4 has to be recompiled against the new net6 to
pick up the fixes.

 be6db739f71c5c08421bf6181e77f3b2  net6-1.3.14.tar.gz [1]

Version 1.3.14:
 * Ensure that overflows on the user ID assigned to each connection
   do not yield one that is already in use.  (Reported by Vasiliy
   Kulikov.)  [CVE-2011-4093]
 * Do not leak information about logged-in users.  (Reported by
   Vasiliy Kulikov.)  [CVE-2011-4091]
 * Fix build failures with GnuTLS 3.0 and above, thanks to
   Vincent Untz.
 * Updated translations

Kind regards,
Philipp Kern
0x539 dev group

[1] http://releases.0x539.de/net6/net6-1.3.14.tar.gz

Gmane