aboutsummaryrefslogtreecommitdiffstats
path: root/COPYING.MIT
diff options
context:
space:
mode:
authorwangmy <wangmy@fujitsu.com>2021-08-19 10:30:47 +0800
committerKhem Raj <raj.khem@gmail.com>2021-08-20 09:26:18 -0700
commite9b63bece7eadfb42bb1e3b3460975e2849a822b (patch)
tree7cb099314e981817362d0bcf5cb00706dd8095e3 /COPYING.MIT
parent36066f34e81fabf9d93e62eac851097c111427a8 (diff)
downloadmeta-openembedded-contrib-e9b63bece7eadfb42bb1e3b3460975e2849a822b.tar.gz
fetchmail: upgrade 6.4.20 -> 6.4.21
* The new security fix in 6.4.20 for CVE-2021-36386 caused truncation of messages logged to buffered outputs, predominantly --logfile. This also caused lines in the logfile to run into one another because the fragment containing the '\n' line-end character was usually lost. Reason is that on all modern systems (with <stdarg.h> header and vsnprintf() interface), the length of log message fragments was added up twice, so that these ended too deep into a freshly allocated buffer, after the '\0' byte. Unbuffered outputs flushed the fragments right away, which masked the bug. Signed-off-by: Wang Mingyu <wangmy@fujitsu.com> Signed-off-by: Khem Raj <raj.khem@gmail.com>
Diffstat (limited to 'COPYING.MIT')
0 files changed, 0 insertions, 0 deletions