Re: CVE id request: newsbeuter

["Steven M. Christey" <coley () linus mitre org>]

On Thu, 4 Sep 2008, Nico Golde wrote:

> Please use version 1.2 here as the fix for 1.1 was
> incomplete.

Our interpretation was that 1.1 fixes the vulnerability, but a
non-security bug forced the release of 1.2.  So 1.1, while perhaps
unusable in practice, was safe from the vuln.

Was that an incorrect interpretation?

- Steve