Re: [Sshguard-users] [bug] sshguard vulnerable to log injection

[Mij <mi...@bi...>]

This was a mistake in the flex rule for the "Invalid user pattern",  
now fixed in HEAD.
As we decided to wait for Federico to finish up the new website before  
releasing
1.4 stable, we'll probably wrap up the recent changes in a further  
1.4rc6 in few
days. Thanks for reporting.


On Aug 4, 2009, at 16:30 , Jochem Oosterveen wrote:

> Hi Mij,
>
> On Aug 4, 2009, at 4:17 PM, Mij wrote:
>> what SSHGuard version are you using?
>
> The one currently in the FreeBSD ports tree:
>
> [jochem@melon ~]$ cat /usr/ports/security/sshguard/distinfo
> MD5 (sshguard-1.3.tar.bz2) = 0e4c82f3c3bfe0880cbb0cc43568f82c
> SHA256 (sshguard-1.3.tar.bz2) =
> 1ff0ea3349c67fdab8f8046eeae6a96046a752ae7458c2259cb31b78c2de08ac
> SIZE (sshguard-1.3.tar.bz2) = 140745
>
> ------------------------------------------------------------------------------
> Let Crystal Reports handle the reporting - Free Crystal Reports 2008  
> 30-Day
> trial. Simplify your report design, integration and deployment - and  
> focus on
> what you do best, core application coding. Discover what's new with
> Crystal Reports now.  http://p.sf.net/sfu/bobj-july
> _______________________________________________
> Sshguard-users mailing list
> Ssh...@li...
> https://lists.sourceforge.net/lists/listinfo/sshguard-users