[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Message-ID: <20090612150621.5b319576@redhat.com>
Date: Fri, 12 Jun 2009 15:06:21 +0200
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Cc: oss-security+ml@...lde.de, roland@...ian.org
Subject: Re: xfig-3.2.5 diff (CVE-2009-1962)
On Fri, 12 Jun 2009 14:46:27 +0200 Nico Golde
<oss-security+ml@...lde.de> wrote:
> > However, Nico's patch, probably taken from Fedora XFig packages, has
> > one hunk missing for:
>
> Yes this is the patch by the Fedora maintainer, I took it
> from our Debian package. You are correct, it looks
> incomplete, the hunk is as well missing in our packages.
Btw, my suggestion for other cases are noted in our BZ:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1962#c2
--
Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
