oss-security - Re: CVE Request

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / NEWS community lists Wiki CVSweb mirrors signatures
bringing security into open environments

Password Recovery Resources on the Net

[<prev] [next>] [<thread-prev] [month] [year] [list]

Date: Wed, 14 Oct 2009 15:35:20 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE Request - backintime

Use CVE-2009-3611 for this.

Thanks.

-- 
    JB


----- "Jan Lieskovsky" <jlieskov@...hat.com> wrote:

> Hello Steve, vendors,
> 
>    while this issue seem to be already silently fixed:
> 
> https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html
> https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
> https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
> 
> for purpose of proper tracking, it should get a CVE identifier.
> 
> References:
> -----------
> https://bugzilla.redhat.com/show_bug.cgi?id=520210
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
> https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
> http://bugs.gentoo.org/show_bug.cgi?id=289047
> 
> Patch from Debian:
> ------------------
> http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz
> 
> Thanks && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.