From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: (qmail 25253 invoked from network); 29 Oct 2004 21:33:30 -0000 Received: from unknown (HELO lists.gnu.org) (199.232.76.165) by sourceware.org with SMTP; 29 Oct 2004 21:33:30 -0000 Received: from localhost ([127.0.0.1] helo=lists.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CNeV8-0000s7-VE for listarch-gnats-devel@sources.redhat.com; Fri, 29 Oct 2004 17:41:38 -0400 Received: from mailman by lists.gnu.org with tmda-scanned (Exim 4.33) id 1CNeV4-0000s2-HN for help-gnats@gnu.org; Fri, 29 Oct 2004 17:41:34 -0400 Received: from exim by lists.gnu.org with spam-scanned (Exim 4.33) id 1CNeV4-0000rq-36 for help-gnats@gnu.org; Fri, 29 Oct 2004 17:41:34 -0400 Received: from [199.232.76.173] (helo=monty-python.gnu.org) by lists.gnu.org with esmtp (Exim 4.33) id 1CNeV3-0000rn-Uy for help-gnats@gnu.org; Fri, 29 Oct 2004 17:41:34 -0400 Received: from [199.199.210.160] (helo=chef.nerp.net) by monty-python.gnu.org with esmtp (Exim 4.34) id 1CNeNA-00037A-Is for help-gnats@gnu.org; Fri, 29 Oct 2004 17:33:24 -0400 Received: by chef.nerp.net (Postfix, from userid 1058) id 239AE2F8E6; Fri, 29 Oct 2004 16:33:20 -0500 (CDT) Date: Fri, 29 Oct 2004 21:33:00 -0000 From: "Chad C. Walstrom" To: help-gnats@gnu.org Message-ID: <20041029213319.GA14062@wookimus.net> Mail-Followup-To: help-gnats@gnu.org Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline X-Operating-System: Linux chef 2.6.8-1-k7-smp X-GnuPG-Fingerprint: B4AB D627 9CBD 687E 7A31 1950 0CC7 0B18 206C 5AFD User-Agent: Mutt/1.5.6+20040722i Subject: Preparing 4.1... X-BeenThere: help-gnats@gnu.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: General discussion about GNU GNATS List-Archive: List-Post: List-Help: List-Subscribe: , Sender: help-gnats-bounces+listarch-gnats-devel=sources.redhat.com@gnu.org Errors-To: help-gnats-bounces+listarch-gnats-devel=sources.redhat.com@gnu.org X-SW-Source: 2004-q4/txt/msg00002.txt.bz2 Hello, folks. Well, now that my training as a parent have been initiated, I think it's time to put my shoulder to the grindstone. Hans-Albert submitted a change to CVS to fix a couple buffer overflow problems on September 6th, and we should roll these out into a new release of gnats sooner than later. An optimistic goal is to have a release ready to roll out by Monday. If you have patches or fixes you would like incorporated, please let me know ASAP. Things I still plan on rolling in for the 4.1 release: * NEWS: Summarize changes and important security fixes * A note in the compilation documentation that bison version 1.35 or earlier is required to rebuild getdate.c. (Is there anyone versed in using bison to update the getdate.y file to use bison 1.875?) * install-sid: Either remove or update so that a separate configuration (sh) file is generated rather than editing send-pr. * send-pr: - Source a configuration (sh) file (i.e. /etc/gnats/send-pr.conf) and $HOME/.send-pr.conf to override default environment variables - Remove or update references/error messages regarding install-sid * debian/...: Roll in changes from current debian package I'm going to hold off on the PAM patch for just a while longer. Pankaj, do you think it would be possible to add a cautionary note in gnats.texi regarding the security problems in exposing the PAM to GNATS authentictation (i.e. plain-text network protocol sniffing)? For example, we should suggest that administrators not authenticate system accounts through GNATS. Rather, give suggestions for using other PAM modules to authenticate against alternate passwd or db format files. (Is it possible to blacklist pam modules for use w/gnats?) Once we get a gnutls layer incorporated into the gnats daemon and libraries, we could update our suggestions to be more permissive. Note: I do have to purchase and install a new power supply for my workstation at home, but I hope to have it up and running later tonight. -- Chad Walstrom http://www.wookimus.net/~chewie _______________________________________________ Help-gnats mailing list Help-gnats@gnu.org http://lists.gnu.org/mailman/listinfo/help-gnats