Re: Lenny and CVE-2011-0536

[Moritz Mühlenhoff <jmm@inutil.org>]

On Thu, Apr 21, 2011 at 01:56:52PM -0600, Tor Mohling wrote:
> Hi,
> 
> I'm concerned that the status of glibc with regards to Debian Lenny is still marked as "VULNERABLE"
> at:
>    http://security-tracker.debian.org/tracker/CVE-2011-0536
> 
> My understanding is that bug 600667 relates to this CVE and has been marked "CLOSED"
> (http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=600667 ).
> 
> If Lenny is not vulnerable, then is it possible the CVE tracker can also be updated to reflect this?
> 
> Thanks much for your consideration of this matter,
> -tor

glibc from Lenny is fine, I've updated the tracker.

Cheers,
        Moritz