* Nico Golde:

>> +CVE-2007-4743 [Incorrect fix for CVE-2007-3999: buffer overflow in RPC 
>> library]
>> +    - krb5 <unfixed> (high)
>> +    - librpcsecgss <unfixed>
>>  CVE-2007-4731
>
> Is there any public information about why exactly this patch 
> is wrong?

<http://article.gmane.org/gmane.comp.encryption.kerberos.announce/86>

I've also put it into the list file.

_______________________________________________
Secure-testing-team mailing list
[email protected]
http://lists.alioth.debian.org/mailman/listinfo/secure-testing-team

Reply via email to