Openwall GNU/*/Linux - a small security-enhanced Linux distro for servers
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 31 Aug 2010 15:40:17 -0400 (EDT)
From: Josh Bressers <>
Cc: coley <>
Subject: Re: CVE id request: libc fortify source information

----- "Nico Golde" <> wrote:

> Hi,
> did this ever get a CVE id? As this also works for setuid programs it
> would be 
> nice to get one assigned and have this patched.


What is MITRE policy on this one. By itself I question if this is a
security flaw, but it also would appear to have the potential to turn a DoS
into something worse.

I'm not sure what policy is in this instance.



Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Powered by Openwall GNU/*/Linux - Powered by OpenVZ