Date: Fri, 03 Aug 2012 08:04:12 +0200 From: Yves-Alexis Perez <corsac@...ian.org> To: oss-security@...ts.openwall.com Subject: Re: openvswitch world writable directories (CVE-2012-3449) On jeu., 2012-08-02 at 13:08 -0600, Kurt Seifried wrote: > Andreas Beckmann debian@...ckmann.de reports: > > openvswitch-pki creates the following world writable directories > during > installation: > […] > Please use CVE-2012-3449 for this issue. I'm unsure if you want to allocate CVEs for all this kind of issues, but Andreas is currently reporting a bunch of bugs for those. See: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683649 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=683647 and I guess there might be more to come since it's the result of piuparts tests run against the whole archive. Regards, -- Yves-Alexis Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.