Re: CVE-2010-3847 fixed or not?

[Kees Cook <kees@debian.org>]

Hi Arne,

On Wed, Apr 13, 2011 at 11:23:10AM +0200, Arne Wichmann wrote:
> So, does that mean that CVE-2010-3847 and CVE-2011-0536 can be closed in
> the tracker?

Yes, that is my understanding. IIUC, 2.11.2-8 fixed CVE-2011-0536 by
updating the patches for CVE-2010-3847.

-Kees

-- 
Kees Cook                                            @debian.org