Re: [bug-serveez] Serveez Information Leak Vulnerability

[Raimund 'Raimi' Jacob-Blödorn]

On 11/4/19 3:20 AM, Austin James Gadient wrote:

Hello Austin,

What a surprise! To see someone actually having a look at serveez and 
finding a bug.

> I am trying to contact the maintainer for Serveez version 0.2.2 because 
> I have found an information leak vulnerability in the program. I 
> am hoping to help them get a patch pushed. ​

I am not sure how much if a maintainer serveez currently really has. I 
have not heard from Thien-Thi (ttn) for a long time. And all of the 
original authors have stopped developing (and using) serveez.

However: I still have access to the git repo and I am willing to apply 
any patch you may suggest:

http://git.savannah.gnu.org/cgit/serveez.git

I think the best way would be to patch against the "next" branch and 
then make a 0.2.3 out of it.

I am also very curious what kind of problem you have discovered.

        Raimund

PS: feel free to contact me directly as I am not sure how well the 
mailing lists are currently working. sometimes they lag for many many hours.