This bug was fixed in the package libnss-db - 2.2.3pre1-3ubuntu1.8.10.2
---------------
libnss-db (2.2.3pre1-3ubuntu1.8.10.2) intrepid-security; urgency=low
* SECURITY UPDATE: allows reading of arbitrary file contents (LP: #531976)
- Add 200-set-db-environment.dpatch: set environment correctly.
- CVE-2010-0826
-- Kees Cook <[email protected]> Tue, 30 Mar 2010 10:41:17 -0700
** Changed in: libnss-db (Ubuntu Hardy)
Status: Confirmed => Fix Released
--
libnss_db reads a DB_CONFIG file in the current directory
https://bugs.launchpad.net/bugs/531976
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
