oss-security - Re: Security fixes in m4-1.4.11

Openwall Project		/home Owl JtR Pro crypt pam_passwdqc tcb phpass scanlogd popa3d msulogin / Linux BIND / advisories presentations / services donations / wordlists passwords / community lists wiki CVSweb mirrors signatures
bringing security into open environments

This website is powered by Openwall GNU/*/Linux security-enhanced OS

[<prev] [next>] [<thread-prev] [thread-next>] [month] [year] [list]

Date: Sun, 6 Apr 2008 20:42:07 -0400 (EDT)
From: "Steven M. Christey" <coley@...us.mitre.org>
To: oss-security@...ts.openwall.com
Subject: Re: Security fixes in m4-1.4.11

On Sun, 6 Apr 2008, Patrick J. Volkerding wrote:

> Minor security fix: Quote output of mkstemp.

Use CVE-2008-1687

> Security fix: avoid arbitrary code execution with 'm4 -F'.

Use CVE-2008-1688

Note - these CVE's will not be live until Monday.

- Steve

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.