oss-security - CVE Request (evolution)

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / news community lists wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [thread-next>] [month] [year] [list]

Date: Tue, 12 May 2009 14:28:48 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security <oss-security@...ts.openwall.com>
Subject: CVE Request (evolution)

Hello everyone,

So there is a public bug about how Evolution sets permissions on folders in
~/.evolution

The current public bugs I know of are here:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=526409
http://bugzilla.gnome.org/show_bug.cgi?id=581604
https://bugzilla.redhat.com/show_bug.cgi?id=498648

This one probably needs some discussion with upstream before it gets fixed.
The threat is fairly minor, and we don't want to do anything rash and end up
breaking something.

-- 
    JB

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.