madwifi driver security issue...

[Drew Bertola]

I just saw this on madwifi.org:

A critical security flaw (CVE-2006-6332
<http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6332>) has been
discovered which can be exploited from remote and allows arbitrary code
injection. The fix has been committed to trunk in r1842
<http://madwifi.org/changeset/1842>. In addition, we released v0.9.2.1
(v0.9.2 plus the fix for the issue), which is available for download
<http://sourceforge.net/project/showfiles.php?group_id=82936&package_id=85233>
from sf.net.

Since the latest freshrpms release is 0.9.2, I thought I should pass
this on.

http://madwifi.org/wiki/news/20061207/release-0-9-2-1-fixes-critical-security-issue


--
Drew