Re: CVE Request coreutils

[Matthias Weckbecker <mweckbecker () suse de>]

On Monday 21 January 2013 15:59:48 Michael Tokarev wrote:
> 21.01.2013 18:54, Sebastian Krahmer wrote:
> > Hi,
> >
> > Can someone assign a CVE id for a buffer overflow in coreutils?
> > Its the same code snippet (coreutils-i18n.patch) and it affects sort,
> > uniq and join:
>
> It's probably worth to mention that these are SuSE-specific and not in
> upstream, if I understand correctly.

Tough to say unless you really looked into every single distribution out
there. Just assuming something is dangerous.

> > https://bugzilla.novell.com/show_bug.cgi?id=798538
> > https://bugzilla.novell.com/show_bug.cgi?id=796243
> > https://bugzilla.novell.com/show_bug.cgi?id=798541
>
> Thanks,
>
> /mjt

Thanks,
Matthias

-- 
Matthias Weckbecker, Senior Security Engineer, SUSE Security Team
SUSE LINUX Products GmbH, Maxfeldstr. 5, D-90409 Nuernberg, Germany
Tel: +49-911-74053-0;  http://suse.com/
SUSE LINUX Products GmbH, GF: Jeff Hawn, HRB 16746 (AG Nuernberg)