List:Packagers« Previous MessageNext Message »
From:Christian Hammers Date:October 18 2004 2:35am
Subject:CVE IDs for the last security bugs
View as plain text  
Hello

As this is of general interest to other maintainers, as well, I post it
here.

bye,

-christian-

On 2004-10-14 Martin Schulze wrote:
> I have now received two more CVE Ids for the other two vulnerabilities that
> weren't fixed in our stable release.
> 
> If you have a good channel to the upstream developers, please tell them
> about the CVE IDs and ask them to add a note to their bug tracking system
> that an id was assigned to a particular issue.

 [some text removed]
 
> > > Crash with MATCH..AGAINST
> > >   Bug: #3870
CAN-2004-0956
 
> > > Privilege Escalation in ALTER TABLE RENAME
> > >   Bug: #3270
CAN-2004-0835
 
> > > Potential Memory Overrun With Compromised DNS Server
> > >   Class: Denial of Service (crash but not exploitable with glibc they
> > >   claim) Bug: #4017
CAN-2004-0836

> > > Privilege Escalation on GRANT ALL ON `Foo\_Bar`
> > >   Bug: #3933
CAN-2004-0957
 
> > > Concurrent accesses to MERGE tables can result in crash
> > >   Bug: #2408
CAN-2004-0837


Attachment: [application/pgp-signature]
Thread
CVE IDs for the last security bugsChristian Hammers18 Oct