oss-security - CVE-2008-0352 is a dup of CVE-2007-4567

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Wed, 7 May 2008 12:42:38 -0700
From: Kees Cook <kees@...ntu.com>
To: oss-security@...ts.openwall.com,
        "Steven M. Christey" <coley@...us.mitre.org>
Subject: CVE-2008-0352 is a dup of CVE-2007-4567

Hello,

I believe CVE-2008-0352 is an accidental dup of CVE-2007-4567.  The
referenced 2.6.21.2 commit[1] matches the commit used to originally
address CVE-2007-4567 in Ubuntu's 2.6.20-based kernel[2].

Thanks,

-Kees

[1] http://git.kernel.org/?p=linux/kernel/git/stable/linux-2.6.21.y.git;a=commitdiff;h=08a6507044dd70c326de3ea484fd6d29b8101f17
[2] http://kernel.ubuntu.com/git?p=ubuntu-security/ubuntu-feisty.git;a=commitdiff;h=158eeb50e460dd7f6e6bc13e2322989bd87dd804

-- 
Kees Cook
Ubuntu Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.