Re: CVE Request coreutils

[Moritz Muehlenhoff <jmm () debian org>]

Hi Sebastian,

> Can someone assign a CVE id for a buffer overflow in coreutils?
> Its the same code snippet (coreutils-i18n.patch) and it affects sort, uniq and join:
>
> https://bugzilla.novell.com/show_bug.cgi?id=798538
> https://bugzilla.novell.com/show_bug.cgi?id=796243
> https://bugzilla.novell.com/show_bug.cgi?id=798541

Could you send the faulty patch to the list so that distros can validate
that they don't include it themselves?

Cheers,
        Moritz