Re: stalin: CVE-2015-8697: Insecure use of temporary files

From	Rob Browning <rlb@defaultvalue.org>
Newsgroups	linux.debian.security
Subject	Re: stalin: CVE-2015-8697: Insecure use of temporary files
Date	2016-01-15 05:50 +0100
Message-ID	<qR4uJ-TT-1@gated-at.bofh.it> (permalink)
Organization	linux.* mail to news gateway

Show all headers | View raw

I believe the package is scheduled to be removed next week, and I'm
still waiting on a discussion with upstream about a (non-trivial) patch
I wrote to attempt to address the problem.

So I wanted to ask for an opinion about the claim here that it might be
reasonable to lower the severity:

  https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=808730#20

Thanks
-- 
Rob Browning
rlb @defaultvalue.org and @debian.org
GPG as of 2011-07-10 E6A9 DA3C C9FD 1FF8 C676 D2C4 C0F0 39E9 ED1B 597A
GPG as of 2002-11-03 14DD 432F AE39 534D B592 F9A0 25C8 D377 8C7E 73A4

Back to linux.debian.security | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Re: stalin: CVE-2015-8697: Insecure use of temporary files Rob Browning <rlb@defaultvalue.org> - 2016-01-15 05:50 +0100
  Re: stalin: CVE-2015-8697: Insecure use of temporary files Rob Browning <rlb@defaultvalue.org> - 2016-01-20 12:50 +0100
    Re: stalin: CVE-2015-8697: Insecure use of temporary files Salvatore Bonaccorso <carnil@debian.org> - 2016-01-20 13:00 +0100

csiph-web