oss-security - duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file]

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-Id: <200810041830.42044.steffen.joeris@skolelinux.de>
Date: Sat, 4 Oct 2008 18:30:37 +1000
From: Steffen Joeris <steffen.joeris@...lelinux.de>
To: oss-security@...ts.openwall.com
Cc: coley@...re.org
Subject: duplicates: CVE-2008-4406 and CVE-2008-4407 [sabre insecure temp file]

Hi

The CVE ids issued for sabre regarding the insecure use of the tmp file are 
the same. The issue was introduced by a debian patch, but other vendors might 
have possibly patched it the same way. I suggest to mark one of them as a 
duplicate though, because it might be confusing.

Cheers
Steffen

Download attachment "signature.asc " of type "application/pgp-signature" (198 bytes)

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.