5 ms·
> There is still no working patch. Is this still true? On Ubuntu we got another update today: * SECURITY UPDATE: incomplete fix for CVE-2014-6271
by jewel 12y ago
> There is still no working patch.
Is this still true? On Ubuntu we got another update today:
* SECURITY UPDATE: incomplete fix for CVE-2014-6271
- debian/patches/CVE-2014-7169.diff: fix logic in parse.y.
- CVE-2014-7169
-- Marc Deslauriers <marc.deslauriers@ubuntu.com> Thu, 25 Sep 2014 02:06:49 -0400
- sdrothrock 12y agoWouldn't "incomplete fix" seem to be evidence that it's not a fix?
- CUViper 12y ago7169 is the notice that 6271 was incomplete.
- somethingnew 12y agoYes Ubuntu is still vulnerable to 7169, but it looks as if the release has been pushed. http://people.canonical.com/~ubuntu-security/cve/2014/CVE-2014-7169.html http://people.canonical.com/~ubuntu-security/cve/2014/CVE-20...