Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Message-ID: <4DA8A1AB.5070003@mvista.com>
Date: Fri, 15 Apr 2011 09:51:07 -1000
From: akuster <akuster@...sta.com>
To: oss-security@...ts.openwall.com
CC: Josh Bressers <bressers@...hat.com>, 
 "Steven M. Christey" <coley@...us.mitre.org>
Subject: Re: CVE request: kernel: a collection of world-writable
 debugfs bugs


Does affected code have to be in the main K.O repo or can it be in any
of the other git kernel repos to get a CVE #?

We have least one product possible affected in
arch/arm/mach-omap2/debobs.c but this file does not exist in K.O, maybe
somewhere else (our paper trail on this is coming up cold so I don't
know where is came from).

- Armin

On 02/22/2011 03:01 AM, Josh Bressers wrote:
> Do we know the affected versions? This probably won't be 20 IDs,
> but I suspect it won't be one either.
> 
> Thanks.
> 

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.