oss-security January 2011 archive
Main Archive Page > Month Archives  > oss-security archives
oss-security: Re: [oss-security] CVE request: multiple gypsy vul

Re: [oss-security] CVE request: multiple gypsy vulnerabilities

From: Josh Bressers <bressers_at_nospam>
Date: Tue Jan 25 2011 - 16:49:41 GMT
To: oss-security@lists.openwall.com

I'm giving these 2011 IDs. None of the information was public in 2010.

----- Original Message -----
> Hello,
>
> I'd like to get CVEs assigned for two issues in Gypsy[1]:
>
> reads arbitrary files as root user on behalf of regular user
> https://bugs.freedesktop.org/show_bug.cgi?id=33431

Use CVE-2011-0523.

>
> buffer overflow in nmea device input handling
> https://bugs.freedesktop.org/show_bug.cgi?id=33431
>

Use CVE-2011-0524.

Thanks.

-- JB