oss-security - Re: CVE requests: maradns, freeciv, rbot, gitolite, gource, shib, kvirc

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 11 Jun 2010 14:04:26 -0400 (EDT)
From: Josh Bressers <bressers@...hat.com>
To: oss-security@...ts.openwall.com
Cc: coley <coley@...re.org>
Subject: Re: CVE requests: maradns, freeciv, rbot, gitolite,
 gource, shib, kvirc

Steve,

Can MITRE handle this one. It's bigger than a breadbox and I lack time
to go through each of this right now.

Thanks.

-- 
    JB


----- "Moritz Muehlenhoff" <jmm@...ian.org> wrote:

> Hi,
> Please assign CVE IDs for these issues current present in the Debian
> Security Tracker, but for which no CVE IDs have been assigned so far:
> 
> 1. maradns
> http://maradns.org/download/maradns-1.4.02-parse_segfault.patch
> Fixed in 1.4.03
> 
> 2. freeciv 
> http://gna.org/bugs/?15624
> Fixed in 2.2.1 and 2.3.0
> 
> 3. rbot (http://ruby-rbot.org/)
> http://www.securityfocus.com/archive/1/509719/30/0/threaded
> 
> 4. gitolite
> http://secunia.com/advisories/39587/
> http://github.com/sitaramc/gitolite/commit/1e06fea3b6959faeb72d8dca46cd4753ada48637
> http://github.com/sitaramc/gitolite/commit/5fd9328c1cd1e7c576b6530b3253061c68b159aa
> http://github.com/sitaramc/gitolite/commit/5deffee3cff5f9a13c59b8c1e357c5a32487d1c3
> 
> 5. gource
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=577958
> 
> 6. Shibboleth:
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=571631
> 
> 7. kvirc
> http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html
> 
> Cheers,
>         Moritz

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.