Date: Fri, 12 Jun 2009 15:06:21 +0200 From: Tomas Hoger <thoger@...hat.com> To: oss-security@...ts.openwall.com Cc: oss-security+ml@...lde.de, roland@...ian.org Subject: Re: xfig-3.2.5 diff (CVE-2009-1962) On Fri, 12 Jun 2009 14:46:27 +0200 Nico Golde <oss-security+ml@...lde.de> wrote: > > However, Nico's patch, probably taken from Fedora XFig packages, has > > one hunk missing for: > > Yes this is the patch by the Fedora maintainer, I took it > from our Debian package. You are correct, it looks > incomplete, the hunk is as well missing in our packages. Btw, my suggestion for other cases are noted in our BZ: https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2009-1962#c2 -- Tomas Hoger / Red Hat Security Response Team
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.