sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities]

From: Thomas Houssin <thomas.houssin AT gmail.com>
To: Thomas Houssin <Thomas.Houssin AT gmail.com>
Cc: sm-security AT lists.ibiblio.org
Subject: Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities]
Date: Fri, 22 Apr 2005 16:01:42 +0200

Thomas Houssin wrote:
> Seth Alan Woolley wrote:
> <snip>
>
>>Whatever gets the bug out -- if features need to be disabled or other
>>non-security bugs left in to do that, you don't have much of a choice --
>>the security fix goes in regardless. (IMHO now that I'm not team leader
>>;) ).
>>
>>Seth
>>
>
> I began to work on that, I'll try to finish that tomorrow.
>
Fixed in all grimoires.
In fact I more or less rewrote the xv spell (converted to API2, ...),
and added configure option for jumbo patches enhancements. I works for
me, so I hope I didn't introduce any bug...

--
Thomas Houssin

Security Team Lead : Source Mage GNU/Linux http://www.sourcemage.org
Key fingerprint = 3CB8 3FC4 840D B272 E623 BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature

[SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities], Andrew, 04/21/2005
- Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities], Thomas Houssin, 04/21/2005
  - Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities], Seth Alan Woolley, 04/21/2005
    - Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities], Thomas Houssin, 04/21/2005
      - Re: [SM-Security] [jaervosz AT gentoo.org: [Full-disclosure] [ GLSA 200504-17 ] XV: Multiple vulnerabilities], Thomas Houssin, 04/22/2005