[bug-notifications] [findutils 0004769]: Current stable release is vulnerable to CVE-2007-2452

Mantis Bug Tracker noreply at opencsw.org
Tue Dec 18 00:07:45 CET 2012


The following issue has been CLOSED 
====================================================================== 
https://www.opencsw.org/mantis/view.php?id=4769 
====================================================================== 
Reported By:                jay
Assigned To:                bwalton
====================================================================== 
Project:                    findutils
Issue ID:                   4769
Category:                   upgrade
Reproducibility:            always
Severity:                   major
Priority:                   normal
Status:                     closed
Resolution:                 reopened
Fixed in Version:           
====================================================================== 
Date Submitted:             2011-05-14 14:50 CEST
Last Modified:              2012-12-18 00:07 CET
====================================================================== 
Summary:                    Current stable release is vulnerable to
CVE-2007-2452
Description: 
GNU Findutils release 4.2.31 fixes CVE-2007-2452 but stable is 4.2.30, and
so it's vulnerable.
====================================================================== 

---------------------------------------------------------------------- 
 (0010245) bwalton (administrator) - 2012-12-18 00:07
 https://www.opencsw.org/mantis/view.php?id=4769#c10245 
---------------------------------------------------------------------- 
It was a long time coming but the stable release was just deprecated.

(Small world, btw.)



More information about the bug-notifications mailing list