Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-16 Thread Andriy Grytsenko
Thank you very much!

Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-15 Thread Salvatore Bonaccorso
Control: retitle -1 menu-cache: CVE-2017-8933: socket may be blocked by another user Hi This issue has been assigned CVE-2017-8933. Regards, Salvatore

Processed: Re: Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-15 Thread Debian Bug Tracking System
Processing control commands: > retitle -1 menu-cache: CVE-2017-8933: socket may be blocked by another user Bug #862570 {Done: Andriy Grytsenko } [libmenu-cache3] libmenu-cache: menu-cached socket may be blocked by another user. Changed Bug title to 'menu-cache: CVE-2017-8933:

Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-15 Thread Salvatore Bonaccorso
Hi I requested a CVE via cveform.mitre.org for this issue. Regards, Salvatore

Bug#862570: libmenu-cache: menu-cached socket may be blocked by another user.

2017-05-14 Thread Andriy Grytsenko
Package: libmenu-cache3 Version: 1.0.2-2 Severity: serious Tags: upstream security The socket placed in /tmp is predictable and public-writable. Therefore if one user placed a symlink to another socket instead of socket for another use then said another user will either be unable to get menu, or