[Secure-testing-team] [Secure-testing-commits] r6529 - data/CVE

Florian Weimer
Fri, 07 Sep 2007 12:24:48 -0000

* Nico Golde:

>> +CVE-2007-4743 [Incorrect fix for CVE-2007-3999: buffer overflow in RPC
library]
>> +	- krb5 <unfixed> (high)
>> +	- librpcsecgss <unfixed>
>>  CVE-2007-4731
>
> Is there any public information about why exactly this patch
> is wrong?

<http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86>

I''ve also put it into the list file.