Re: CVE Request - backintime

[Josh Bressers <bressers () redhat com>]

Use CVE-2009-3611 for this.

Thanks.

-- 
    JB


----- "Jan Lieskovsky" <jlieskov () redhat com> wrote:

> Hello Steve, vendors,
>
>    while this issue seem to be already silently fixed:
>
> https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00823.html
> https://www.redhat.com/archives/fedora-package-announce/2009-September/msg00821.html
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
> https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
>
> for purpose of proper tracking, it should get a CVE identifier.
>
> References:
> -----------
> https://bugzilla.redhat.com/show_bug.cgi?id=520210
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=543785
> https://bugs.launchpad.net/ubuntu/+source/backintime/+bug/434256
> http://bugs.gentoo.org/show_bug.cgi?id=289047
>
> Patch from Debian:
> ------------------
> http://ftp.debian.org/debian/pool/main/b/backintime/backintime_0.9.26-3.diff.gz
>
> Thanks && Regards, Jan.
> --
> Jan iankko Lieskovsky / Red Hat Security Response Team