[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: [SECURITY] [DSA 918-1] New osh packages fix privilege escalation



Hi!

maybe I'm (or my browser's cache is) wrong, but DSA 918-1 seems to have a bug.


On Fri, 9 Dec 2005 06:55:46 +0100 (CET)
joey@infodrom.org (Martin Schulze) wrote:

> - --------------------------------------------------------------------------
> Debian Security Advisory DSA 918-1                     security@debian.org
> http://www.debian.org/security/                             Martin Schulze
> December 9th, 2005                      http://www.debian.org/security/faq
> - --------------------------------------------------------------------------
> 
> Package        : osh
> Vulnerability  : programming error
> Problem type   : local
> Debian-specific: no
> CVE ID         : CVE-2005-3347 CVE-2005-3533
> Debian Bug     : 338312

CVE-2005-3347 seems to be wrong and should be corrected with CVE-2005-3346 (see
the bug tracker for this:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=338312 )

I didn't check the other number, btw..

thx

	Jochen Schönfelder

-- 
Dipl. Inf. Jochen Schoenfelder, DFN-CERT Services GmbH
https://www.dfn-cert.de, +49 (0)40 808077-555 (Hotline) -556 (Fax)
PGP RSA/2048, 2738CA9B, FF C9 82 2B 4C FC FD DF 2A F1 7F 2E 65 AA 88 1D

Attachment: signature.asc
Description: PGP signature


Reply to: