Date: Wed, 17 Oct 2012 21:43:50 -0600 From: Kurt Seifried <kseifried@...hat.com> To: oss-security@...ts.openwall.com Subject: Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 10/17/2012 07:54 PM, Michael Gilbert wrote: > On Wed, Oct 17, 2012 at 8:41 PM, Kurt Seifried > <kseifried@...hat.com> wrote: >> When I say released I meant in the sense of made available for >> download, not in the sense of software engineering and doing a >> proper "release". >> >> Release information here: >> >> http://lists.alioth.debian.org/pipermail/pkg-dhcp-devel/2012-April/001275.html >> >> >> Any ways as you can see it's had a CVE assigned: >> >> So for Debian Bug report logs - #690532 CVE-2012-2248: build >> system paths used in -DCLIENT_PATH >> >> So my work here is done =). > > Wasn't the assigned CVE number already apparent as part of the > subject of this thread? > > Best wishes, Mike I have my mail software setup to squish the headers really small. I should probably rethink this space saving strategy. - -- Kurt Seifried Red Hat Security Response Team (SRT) PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://www.enigmail.net/ iQIcBAEBAgAGBQJQf3r2AAoJEBYNRVNeJnmTZzgP/RB1YtyapGHNLtBLGTMfuK6h neg4z5Z+rdv3P4ehHZEcF4hofrkGHhiH/IxACIjaNaeTNpXT80RfWNUI/QGcQYuU P1bIg5mHFNMTNSCW7YrwCwpQSOsOolv33FRm7e5CULWXUfOFAij8vENcTvgcfXb0 WSauqAr2dYAQoaKeVJcrePcS3NbjJD1igqxzfrEY2uHBmNV29PhacgmFus9NrZMS AfFgt55L1/+wzjkcPejRL+1dEPm+K9Wdv2e78TW6z1hZNL3zuVeh+lp8r86HGjHr MhsBRkRKPPoidPmr9X7gPNYWGDm1FdmRDnXQEaWH7jhwpPiXll+x8WOr85KJgxOQ yVlADuXr0vCidMsipIvoyNLtCSaSE8I0FoIWYMl7HSydJ196jFFzhyS4zBHdXQls NwciXtR6MQxV2qyIRtZ8a5rRK/EKQppjdxjrM4XmQWHXW7RkRsqQFckhvl2wo8Ud bPXYdnuesLqFQLg4m1qS2oLj56JSQxNXrUNmSaJo0iyC3zxCrWmy/NlsujZw/+aJ fIaVqTdMEmfRvRFFtERiCuejwK/rIgFQql/JpmT8VJ5ECqucTmcFOcTPcxtk4G2/ +uuqOIZD3cI+uqlv5LvEyQ6Qx8maC+okGHRDqx6SQP9k/wbjK05x9xEtXEv6hnjX bRuiCJdMpbVvH8UYgwkh =xkGO -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.