Re: Please track CVE-2008-3074, CVE-2008-3075, and CVE-2008-3076 in Etch

2008-11-26 Thread Nico Golde
Hi, * Michael Gilbert [EMAIL PROTECTED] [2008-11-26 17:49]: Some issues were recently discovered in vim, which have already been fixed in lenny and unstable, but have yet to be fixed in stable. See [1] for more details. Please add the following CVEs to the security tracker: CVE-2008-3074

Re: Please track CVE-2008-3074, CVE-2008-3075, and CVE-2008-3076 in Etch

2008-11-26 Thread Michael Gilbert
On 11/26/08, Nico Golde wrote: I noticed that you filed quite a bunch of security related bugs recently in a somehow uncoordinated manner. This is no problem and help is always welcome but it would be more helpful to also integrate the data in the tracker. If you plan to work on security in

Re: Please track CVE-2008-3074, CVE-2008-3075, and CVE-2008-3076 in Etch

2008-11-26 Thread Nico Golde
Hi, * Michael Gilbert [EMAIL PROTECTED] [2008-11-26 19:38]: Thanks, added them with hopefully appropriate short descriptions. fyi, according to the vim maintainers, this has already been fixed in testing [1], but the tracker currently shows that testing is vulnerable. i can attempt to fix