From 51c9e42bd822b3bdff25f8cef8f9c735d39319b3 Mon Sep 17 00:00:00 2001 From: Karel Zak Date: Tue, 22 Apr 2008 00:13:20 +0200 Subject: [PATCH] docs: add v2.13.1.1 ReleaseNotes Signed-off-by: Karel Zak --- docs/v2.13.1.1-ReleaseNotes | 27 +++++++++++++++++++++++++++ 1 file changed, 27 insertions(+) create mode 100644 docs/v2.13.1.1-ReleaseNotes diff --git a/docs/v2.13.1.1-ReleaseNotes b/docs/v2.13.1.1-ReleaseNotes new file mode 100644 index 00000000..d18caeea --- /dev/null +++ b/docs/v2.13.1.1-ReleaseNotes @@ -0,0 +1,27 @@ + +Util-linux-ng 2.13.1.1 Release Notes (22-Apr-2008) +================================================== + +Fixed security issues: +--------------------- + + - audit log injection attack. This bug allows attackers to write + arbitrary characters to an audit log via a crafted username. + + The problem was originaly reported for OpenSSH few months ago + (CVE-2007-3102). The login(1) is affected by the same bug when + built with the option "--with-audit". + +Changelog: +--------- + + For more details see ChangeLog files at: + ftp://ftp.kernel.org/pub/linux/utils/util-linux-ng/v2.13/ + + +login: + - audit log injection attack via login [Steve Grubb] +po: + - merge changes [Karel Zak] + - update it.po (from translationproject.org) [Marco Colombo] + - update nl.po (from translationproject.org) [Benno Schulenberg] -- 2.39.5