Re: Vulnerability in Elm-ME+

Kari E. Hurtta
Sat, 17 May 1997 12:16:03 -0000

John Goerzen:
> Hello,
>
> I have confirmed that the recently-reported vulnerability in Elm is also
> present in Elm-ME+ and thus also in Debian GNU/Linux version 1.2,
prerelease
> version 1.3, and development tree "unstable".

OK. I made fix to  Elm 2.4ME+ PL32 (25)

Posted to alt.sources and comp.mail.elm with
Message-ID: <elm2.4ME+/PL32/1@ozone.FMI.FI>
Archive-name: elm2.4ME+/PL32

Available on    ftp.ozone.FMI.FI
                via anonymous ftp
                directory KEH/
                files elm-2.4ME+32.tar.gz
                and elm-2.4ME+PL32.patch.gz

Also available with
        <URL: http://www.ozone.FMI.FI/KEH/elm-2.4ME+32.tar.gz >
and     <URL: http://www.ozone.FMI.FI/KEH/elm-2.4ME+PL32.patch.gz >
via WWW.

/ Kari Hurtta

--------------------------------------------------------------
Version Elm2.4ME+ PL0 (25) is based to version Elm2.4 PL24 ME8b+.
Version Elm2.4 PL24 ME8b+ is based to version Elm2.4 PL24 ME8b.

Version Elm2.4 PL24 ME8b is done by Michael Elkins <elkins.aero.org>.
For details, look file ANNOUNCE.ME

[ Equivalent of MIME code in Elm2.4 PL24 ME8b is posted to
  Elm Development Cordinator ]

Version Elm2.4 PL24 ME8b is based to version Elm2.4 PL24.
Version Elm2.4ME+ PLx (25) includes patch of version Elm2.4 PL25.

Changes of Elm2.4ME+ PL32 (25) compared to Elm2.4ME+ PL31 (25)
---------------------------------------------------------------

	- Incorrect Content-length: -header was causing corruption
	  of folders.
          From: Guy Harris <guy@netapp.com>

	- argv_from_to was not handled '','' in comments correctly.
	  Detected from report of Gary Casterline
		<casterln@nature.Berkeley.EDU>
	> Use rfc822_toklen instead of len_next_part

	- SECURITY: strcpy -> strfcpy changes of Elm2.4ME+ PL29 (25)
	  was not done for curses.c in this source tree.
	  Bug report on List <BUGTRAQ@NETSPACE.ORG>.
	  From: John Goerzen <jgoerzen@happy.cs.twsu.edu>

	- Some changes on curses.c (bl -- bell)

	- Change output of option -v

	- "If you use ''answer -u'', then every user name is
truncated to
	   three letters." ... "Change line 232 to: " ...
          From: Jean-Pierre Radley <jpr@jpr.com>
	  [ Suggested fix was incorrect. ]

	- "Configure always has had a problem on Linux systems,
	   extracting names in a usuable format (from /usr/lib/libc.so).
	   The following small change fixes this."
          From: Bauke Jan Douma <bjdouma@xs4all.nl>

        - "In Solaris enviroment NIS+ is now used instead of Yellow
           Pages so I have modified Configure to reflect this and
           allow to use niscat in the same fashion as ypcat was."
          From: Jerzy Sobczyk <J.Sobczyk@ia.pw.edu.pl>

	- Compilation of filter (actions.c) fail.
          Reported by: Arnout Boer <arnoutb@xs4all.nl>

	- Typo mismatch in lib/strftime.c
	  From: Yuval Shamir <yuvals@iil.intel.com>
	- [wordwrap.c, bultin editor]
          "Wordwrap and delete at the
           beginning of the line does not work in PL31. Fix is below."
          From: "Zoltan T. Hidvegi" <hzoli@VNET.IBM.COM>
          [ I didn''t used supplied patch. ]

	- [builtin editor] There was ''sizeof buffer'' instead of
	  ''buffer_size'' in get_with_expansion()

	- Add same fflush -fix to remail.c which is in mailmsg2.c