Re: Broken builds

2017-05-05 Thread Bart Van Assche
On 05/04/17 14:52, Magnus Fromreide wrote: > On Thu, May 04, 2017 at 06:40:14AM -0700, Bart Van Assche wrote: >> On 05/04/17 00:25, Magnus Fromreide wrote: >>> I looks like the change 9641b472ef01208f92631016e91b0a4a518163f0 (openssl >>> 1.1.0: Fix several build errors) broke the build on machines

Re: vasnprintf

2017-05-05 Thread Bart Van Assche
On 05/04/17 14:58, Magnus Fromreide wrote: > On Thu, May 04, 2017 at 06:42:58AM -0700, Bart Van Assche wrote: >> On 05/04/17 00:18, Magnus Fromreide wrote: >>> I just noticed that your alternate version of vasnprintf calls realloc on >>> the *strp argument but when I look at my system's version it

Username existence disclosure from Agent

2017-05-05 Thread Madhusudhana R
Hi Coders, Regarding a security related finding... When incorrect username is provided from manager (ManageEngine tool), the manager throws "Discovery failed for username" which could be used by an attacker to know whether user exists or not. I did a workaround and came up with fix. Please le