leafnode -- denial of service vulnerability
Matthias Andree reports:
A vulnerability was found in the fetchnews program (the NNTP
client) that may under some circumstances cause a wait for input
that never arrives, fetchnews "hangs". [...]
As only one fetchnews program can run at a time, subsequently
started fetchnews and texpire programs will terminate. [...]
Upgrade your leafnode package to version 1.11.3.
Copyright © 2003-2005 Jacques Vidrine and contributors.
Please see the source of this document for full copyright