From 3c35339bc4d3db033cc44558baf66c80e87fbd85 Mon Sep 17 00:00:00 2001 From: Ian Jackson Date: Fri, 19 Sep 2014 23:51:40 +0100 Subject: [PATCH 1/1] changelog, Makefile.in: finalise 0.3.3 --- Makefile.in | 2 +- debian/changelog | 14 ++++++++++++++ 2 files changed, 15 insertions(+), 1 deletion(-) diff --git a/Makefile.in b/Makefile.in index 60fe8cc..c0a6222 100644 --- a/Makefile.in +++ b/Makefile.in @@ -18,7 +18,7 @@ .PHONY: all clean realclean distclean dist install PACKAGE:=secnet -VERSION:=0.3.3~beta1 +VERSION:=0.3.3 @SET_MAKE@ diff --git a/debian/changelog b/debian/changelog index ded7d3d..59694aa 100644 --- a/debian/changelog +++ b/debian/changelog @@ -1,3 +1,17 @@ +secnet (0.3.3) unstable; urgency=high + + SECURITY FIXES: + * Pass correct size argument to recvfrom. This is a serious security + problem which may be exploitable from outside the VPN. + * Fix a memory leak in some error logging. + + Other related fixes: + * Two other latent bugs in buffer length handling found and fixed. + * Non-critical stylistic improvements to buffer length handling, to make + the code clearer and to assist audit. + + -- Ian Jackson Fri, 19 Sep 2014 23:50:45 +0100 + secnet (0.3.3~beta1) unstable; urgency=low Installation compatibility fix: -- 2.30.2