2007-08-22 [colin] 2.10.0cvs153

	* src/inc.c
		Fix format string vulnerability, thanks to
		Ulf Harnhammar, Secunia Research

diff --git a/ChangeLog b/ChangeLog
index 9def25b5062fa4a280875cf5c1e4f4bd99b6eea5..6d85515d5c0bdb83c45b5e7741520237ad4d8490 100644 (file)
--- a/ChangeLog
+++ b/ChangeLog
@@ -1,3 +1,9 @@
+2007-08-22 [colin]     2.10.0cvs153
+
+       * src/inc.c
+               Fix format string vulnerability, thanks to
+               Ulf Harnhammar, Secunia Research
+
 2007-08-22 [colin]     2.10.0cvs152
 
        * src/ldapserver.c

diff --git a/PATCHSETS b/PATCHSETS
index 3f62045704a9e14a13684499e4dc3a9279228a3b..35cbad924bd415c37b33730b7a9d0f6de9213f5f 100644 (file)
--- a/PATCHSETS
+++ b/PATCHSETS
@@ -2807,3 +2807,4 @@
 ( cvs diff -u -r 1.8.2.28 -r 1.8.2.29 src/editldap.c;  cvs diff -u -r 1.10.2.12 -r 1.10.2.13 src/editldap_basedn.c;  cvs diff -u -r 1.3.2.25 -r 1.3.2.26 src/ldapquery.c;  cvs diff -u -r 1.4.2.14 -r 1.4.2.15 src/ldapserver.c;  cvs diff -u -r 1.2.2.9 -r 1.2.2.10 src/ldapserver.h;  cvs diff -u -r 1.1.2.14 -r 1.1.2.15 src/ldapupdate.c;  cvs diff -u -r 1.1.4.12 -r 1.1.4.13 src/ldaputil.c;  cvs diff -u -r 1.1.4.7 -r 1.1.4.8 src/ldaputil.h;  ) > 2.10.0cvs150.patchset
 ( cvs diff -u -r 1.3.2.26 -r 1.3.2.27 src/ldapquery.c;  ) > 2.10.0cvs151.patchset
 ( cvs diff -u -r 1.4.2.15 -r 1.4.2.16 src/ldapserver.c;  ) > 2.10.0cvs152.patchset
+( cvs diff -u -r 1.149.2.79 -r 1.149.2.80 src/inc.c;  ) > 2.10.0cvs153.patchset

diff --git a/configure.ac b/configure.ac
index 9e504962e80a0977a3326e2c5a5f2062f30333fd..b687b0223644297bd82fb9215f8a6a09f7a19e9b 100644 (file)
--- a/configure.ac
+++ b/configure.ac
@@ -11,7 +11,7 @@ MINOR_VERSION=10
 MICRO_VERSION=0
 INTERFACE_AGE=0
 BINARY_AGE=0
-EXTRA_VERSION=152
+EXTRA_VERSION=153
 EXTRA_RELEASE=
 EXTRA_GTK2_VERSION=
 

diff --git a/src/inc.c b/src/inc.c
index cfda7b8c9587c4aa6a89ea0db39262af2519eb7f..4266e2d7937e6800cb0c74c275d2a79d2d51bff2 100644 (file)
--- a/src/inc.c
+++ b/src/inc.c
@@ -1217,7 +1217,7 @@ static void inc_put_error(IncState istate, Pop3Session *session)
                mainwindow_show_error();
 
        if (err_msg) {
-               alertpanel_error_log(err_msg);
+               alertpanel_error_log("%s", err_msg);
                g_free(err_msg);
        }
 }