Re: CVE-2012-2248: isc-dhcp, Debian-specific: build path included in PATH

[Kurt Seifried <kseifried () redhat com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10/17/2012 07:54 PM, Michael Gilbert wrote:
> On Wed, Oct 17, 2012 at 8:41 PM, Kurt Seifried
> <kseifried () redhat com> wrote:
> > When I say released I meant in the sense of made available for 
> > download, not in the sense of software engineering and doing a
> > proper "release".
> >
> > Release information here:
> >
> > http://lists.alioth.debian.org/pipermail/pkg-dhcp-devel/2012-April/001275.html
Any ways as you can see it's had a CVE assigned:
> > So for Debian Bug report logs - #690532 CVE-2012-2248: build
> > system paths used in -DCLIENT_PATH
> >
> > So my work here is done =).
>
> Wasn't the assigned CVE number already apparent as part of the
> subject of this thread?
>
> Best wishes, Mike

I have my mail software setup to squish the headers really small. I
should probably rethink this space saving strategy.

- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://www.enigmail.net/
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=xkGO
-----END PGP SIGNATURE-----