summaryrefslogtreecommitdiff
path: root/debian
diff options
context:
space:
mode:
authorSteve Kemp <steve@steve.org.uk>2012-11-19 17:43:39 +0000
committerSteve Kemp <steve@steve.org.uk>2012-11-19 17:43:39 +0000
commitaa9f11a72bec8b1cbdc0cc163eb2c9e9be2aaa68 (patch)
treec9cead9b24e689626e1c00eb81bc43a6834d2dde /debian
parent0f08970de029ecea27ee740ef8dc79d1399adc71 (diff)
Updated to report fixing of security issue.
Diffstat (limited to 'debian')
-rw-r--r--debian/changelog1
1 files changed, 1 insertions, 0 deletions
diff --git a/debian/changelog b/debian/changelog
index c7f273c..2f94f57 100644
--- a/debian/changelog
+++ b/debian/changelog
@@ -3,6 +3,7 @@ custodian (2012:1119-3) stable; urgency=low
* Many service probes read a banner from a remote server, and then test it
is sane. For example looking for "ssh", or "smtp" in the string we read.
Ensure we read a string prior to testing for a given response.
+ * Avoid potential shell-injection attacks against HTTP probes.
-- Steve Kemp <steve@bytemark.co.uk> Mon, 19 Nov 2012 16:25:34 +0000