Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [day] [month] [year] [list]
Date: Thu, 4 Feb 2010 12:00:24 -0500 (EST)
From: "Steven M. Christey" <>
Subject: CVE-2009-3297 clarification needed - samba/fuse/ncpfs symlinks

Regarding these bug reports:

It seems that a separate CVE should be assigned for samba, fuse, and 
ncpfs, since these are all distinct codebases.

Since the Samba bug report says that Debian assigned CVE-2009-3297 to the 
Samba part, it looks like two new CVEs are needed, one for fuse and one 
for ncpfs.

Am I missing something here?


Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.