summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorSteve Kemp <steve@steve.org.uk>2012-11-19 17:43:39 +0000
committerSteve Kemp <steve@steve.org.uk>2012-11-19 17:43:39 +0000
commit5129fd2644fc4b3f8b81822c763cc849c465ba7a (patch)
treec9cead9b24e689626e1c00eb81bc43a6834d2dde
parent52db57df1e7cf226439ded8f18c901689755b45b (diff)
Updated to report fixing of security issue.
-rw-r--r--debian/changelog1
1 files changed, 1 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index c7f273c..2f94f57 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ custodian (2012:1119-3) stable; urgency=low
* Many service probes read a banner from a remote server, and then test it
is sane. For example looking for "ssh", or "smtp" in the string we read.
Ensure we read a string prior to testing for a given response.
+ * Avoid potential shell-injection attacks against HTTP probes.
-- Steve Kemp <steve@bytemark.co.uk> Mon, 19 Nov 2012 16:25:34 +0000