Re: [oss-security] CVE request: multiple gypsy vulnerabilities

I'm giving these 2011 IDs. None of the information was public in 2010.

----- Original Message -----
> Hello,
>
> I'd like to get CVEs assigned for two issues in Gypsy[1]:
>
> reads arbitrary files as root user on behalf of regular user
> https://bugs.freedesktop.org/show_bug.cgi?id=33431

Use CVE-2011-0523.

>
> buffer overflow in nmea device input handling
> https://bugs.freedesktop.org/show_bug.cgi?id=33431
>

Use CVE-2011-0524.

Thanks.

-- JB

• This message: [ Message body ]
• Next message: Pierre Joye: "Re: [oss-security] CVE request: libxml2 heap contents leak"
• Previous message: Josh Bressers: "Re: [oss-security] CVE Request: VLC Subtitle StripTags heap corruption"
• In reply to: Kees Cook: "[oss-security] CVE request: multiple gypsy vulnerabilities"

• Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ]