Re: CVE Request: hplip/foomatic-filters

[Tomas Hoger <thoger () redhat com>]

On Thu, 28 Jul 2011 11:21:15 +0200 Tomas Hoger wrote:

> > > https://bugzilla.novell.com/show_bug.cgi?id=698451
> >
> > Please use CVE-2011-2697 for this.
>
> According to SUSE bug, there are two different implementations of the
> filter - one in perl and one in c - in different foomatic versions.
> Both are affected by the same kind of problem, even though they don't
> share vulnerable code.  Is one CVE sufficient here, or is Mitre likely
> to split and assign another when this is processed? Steven?

For posterity: there are 2 CVEs now - CVE-2011-2697 for perl-based
filter in foomatic 3.x, and CVE-2011-2964 for C-based filter in
foomatic 4.x.

-- 
Tomas Hoger / Red Hat Security Response Team