[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Fri, 03 Aug 2012 08:04:12 +0200
From: Yves-Alexis Perez <corsac@...ian.org>
To: oss-security@...ts.openwall.com
Subject: Re: openvswitch world writable directories
(CVE-2012-3449)
On jeu., 2012-08-02 at 13:08 -0600, Kurt Seifried wrote:
> Andreas Beckmann debian@...ckmann.de reports:
>
> openvswitch-pki creates the following world writable directories
> during
> installation:
>
[…]
> Please use CVE-2012-3449 for this issue.
I'm unsure if you want to allocate CVEs for all this kind of issues, but
Andreas is currently reporting a bunch of bugs for those. See:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683649
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647
and I guess there might be more to come since it's the result of
piuparts tests run against the whole archive.
Regards,
--
Yves-Alexis
Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
