Path: csiph.com!weretis.net!feeder6.news.weretis.net!nntp.club.cc.cmu.edu!micro-heart-of-gold.mit.edu!bloom-beacon.mit.edu!bloom-beacon.mit.edu!171.64.64.130.MISMATCH!usenet.stanford.edu!not-for-mail
From: Salvatore Bonaccorso <carnil@debian.org>
Newsgroups: gnu.utils.bug
Subject: Re: Vulnerability Report on Sharutils 4.15.2
Date: Fri, 6 Apr 2018 06:26:11 +0200
Lines: 23
Sender: Salvatore Bonaccorso <salvatore.bonaccorso@gmail.com>
Approved: bug-gnu-utils@gnu.org
Message-ID: <mailman.11784.1523020086.27995.bug-gnu-utils@gnu.org>
References: <47a93dc0-b0f9-9dc7-593e-ce7f96f56e19@gmail.com> <20180325175147.GA13587@eldamar.local> <CAFkjv+vMm9SB+U04_97D+To9DUaOBS2O6uLBxM1=PsPYGdn8qg@mail.gmail.com> <20180326044616.f4aouw6a2k5px4jq@lorien.valinor.li> <CAFkjv+vZgV6zbrhnLQDpJETZjMyajo05=r+wtqZ6BvtgjV7=xg@mail.gmail.com>
NNTP-Posting-Host: lists.gnu.org
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: bug-gnu-utils@gnu.org
To: Mohd Hanafie <nafiez.skins@gmail.com>
Envelope-to: bug-gnu-utils@gnu.org
Content-Disposition: inline
In-Reply-To: <CAFkjv+vZgV6zbrhnLQDpJETZjMyajo05=r+wtqZ6BvtgjV7=xg@mail.gmail.com>
User-Agent: Mutt/1.9.4 (2018-02-28)
Precedence: list
Xref: csiph.com gnu.utils.bug:2237

Hi!

[adding back the bug-gnu-utils@gnu.org list]

On Mon, Mar 26, 2018 at 04:49:56AM +0000, Mohd Hanafie wrote:
> Hi,
> 
> Apologize for the confusion. Yes I reported two different bugs here. One
> has been assign with CVE the other seems no update.
> 
> Do you guys take a look into this? If yes, is there a fix will propose and
> cve assign?

Thanks for confirming they are different issues.

AFAICT for this issue still no proposed fix is available for the
issues raised in
https://lists.gnu.org/archive/html/bug-gnu-utils/2018-02/msg00003.html,
nor am I aware of any requested CVE assignments.

Regards,
Salvatore