I am happy to announce the release of libevent 1.4.5-stable. You can download the source here:
http://monkey.org/~provos/libevent-1.4.5-stable.tar.gz
There have been a few bug fixes since 1.4.4-stable. Here's a brief summary:
- Several HTTP fixes
- Fixed the Windows port
- event_rpcgen.py correctly generates fixed length entries now
See the
changelog for full details.
We would like to thank the people who have reported bugs including Forest Wilkinson, liusifan and others. To report a bug, make a feature request, or submit code, you can use our
sourceforge interface here.
Fifteen years ago my father wrote a fantasy novel that no publisher in Germany wanted to print. As Christmas present, I decided in October last year to get the book printed professionally as a hard cover. It took about nice months to do layout, copy editing and getting illustrations as well as a dust cover painted. It even got an ISBN number: 978-0-9816907-0-4. I received a palette with 380 books today and they really look great. The cover is a red linen with golden stamping and the offset print is very clear and crisp. If you can read German, most of the text is also available
online, but a printed book reads much nicer.
I am happy to announce the release of libevent 1.4.4-stable. You can download the source here:
http://monkey.org/~provos/libevent-1.4.4-stable.tar.gz
There have been a few bug fixes since 1.4.3-stable. Here's a brief summary:
- Epoll fixes
- Correctly handle timeouts larger than 35 minutes for older Linux kernels
- Tagging fixes:
- Fixes a potential stack corruption on 64-bit architectures
- Bufferevent changes:
- Fixes a corner cases for read watermarks
- Expose the watermark functionality in bufferevent
- HTTP changes:
- Fix a bug where it was not possible to accept on multiple sockets
- Expose the evhttp_accept_socket() functionality which allows the HTTP server to listen on an already created socket
- Portability fixes:
- Fix functionality and compile problems on Windows and IRIX
- Provide a timercmp function that works on all platforms
See the
changelog for full details.
We would like to thank the people who have reported bugs including Matt Domsch, Forest Wilkinson, Jon and several anonymous reporters. To report a bug, make a feature request, or submit code, you can use our
sourceforge interface.
This release addresses a number of correctness and reliability problems with the ptrace backend. Tavis Ormandy provided fixes for the following problems: a potential escape of socket aliases and double free and a problem with fork and ptrace (CVE-2007-4773). The tar ball for Systrace 1.6e can be downloaded
here. Just keep in mind that ptrace has not been designed as a security primitive and while the ptrace backend can restrict the behavior of programs in non-adversarial settings, there are many ways to circumvent it.
At
WOOT this year, Robert Watson presented a paper on how to evade popular system call interposition systems, including Systrace. For Systrace, Robert noticed that the arguments written to the stackgap could be replaced by a co-operating process after Systrace performed its policy check. The initial prototype of Systrace as described in the
paper avoided this problem by using a look-aside buffer in the kernel. This imposes a slight performance penalty but I hope that this obvious solution is going to be included in the OpenBSD and NetBSD kernel soon.
When I got home from traveling at around 3am last night, I found a box with 10 books on the table. Although,
Virtual Honeypots covers primarily honeypots, it also features a small section on SpyBye that is part of a larger chapter on client honeypots. Other topics that we cover relating to this are on analyzing malware and tracking botnets. I am very pleased with the book in general and it will be interesting to see how it is going to do over the next few months.
