oss-security - Re: More CVE-2009-2408 like issues

Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Wed, 23 Sep 2009 11:05:17 +0200
From: Tomas Hoger <thoger@...hat.com>
To: oss-security@...ts.openwall.com
Cc: "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: More CVE-2009-2408 like issues

On Thu, 3 Sep 2009 16:45:47 +0200 Tomas Hoger <thoger@...hat.com> wrote:

> wget - bunch of relevant links are available in here:
>   https://bugzilla.redhat.com/show_bug.cgi?id=520454

Fixed now in upstream version 1.12:
  http://permalink.gmane.org/gmane.comp.web.wget.general/8972

This and other mentioned in my previous mail (mutt 1.5.19+, possibly
pre-1.5.19 too, but many are likely to wontfix that; OpenLDAP with
openssl) should probably get CVE.

-- 
Tomas Hoger / Red Hat Security Response Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.