Index of /jadc2s/bugfix-for-0.9.0

	Name	Last modified	Size	Description
	Parent Directory		-
	README.html	01-Dec-2005 02:58	724
	jadc2s-0.9.0.1.diff.bz2	21-Sep-2004 16:43	36K	bugfix for jadc2s 0.9.0 as a unified diff file
	jadc2s-0.9.0.1.diff.bz2.sig	21-Sep-2004 16:43	65	bugfix for jadc2s 0.9.0 as a unified diff file
	old/	21-Sep-2004 16:46	-

jadc2s up to and including version 0.9.0 includes a bug in the included expat parser, that allows a remote user to crash jadc2s by sending invalid XML code.

The bug has been reported on 2004-09-19 on the jabberd mailing list. CVS versions of jadc2s are not affected by this bug since 2004-09-07 as the code containing the bug had been removed from jadc2s at this date.

The patch on this page includes two other fixes:

• fix for a small problem in the command line parsing, that is not security relevant but made the -c option useless in version 0.9.0.
• fix for a problem, that the SSL security layer in jadc2s 0.9.0 may break

2004-09-20, Matthias Wimmer