[Secure-testing-commits] r15920 - data/CVE

Moritz Muehlenhoff jmm at alioth.debian.org
Tue Jan 18 21:49:02 UTC 2011


Author: jmm
Date: 2011-01-18 21:49:02 +0000 (Tue, 18 Jan 2011)
New Revision: 15920

Modified:
   data/CVE/list
Log:
lbreakout non-issue


Modified: data/CVE/list
===================================================================
--- data/CVE/list	2011-01-18 21:14:50 UTC (rev 15919)
+++ data/CVE/list	2011-01-18 21:49:02 UTC (rev 15920)
@@ -477,8 +477,7 @@
 	NOTE: Negligable privilege escalation
 CVE-2011-XXXX [Crash with long HOME environment variable]
 	- lbreakout2 <unfixed> (unimportant; bug #608980)
-	NOTE: Negligable privilege escalation
-	NOTE: CVE ID requested
+	NOTE: sgid games is dropped before buffer overflow
 CVE-2011-XXXX [Crash with long GGI_DISPLAY environment variable]
 	- libggi <unfixed> (bug #608981)
 CVE-2011-0343 [syslog-ng log permissions]




More information about the Secure-testing-commits mailing list