On Mon, Oct 17, 2011 at 11:17:32PM +0200, Nicolas François wrote: > Regarding this bug > * Arne, I do not know if your ping was related to the potential security > impact, but it could help to have an assessment of the proposed solution > (and also comment 46)
Judging from the available documentation it seems fine, but I suggest you consult Alan Cox (a...@linux.intel.com), who's done most of the Linux tty scrutiny in the recent years for a second opinion. > * It did not seem that critical to me (e.g. in the pointed > comp.security.oss.general thread, there were no agreement for a CVE) FWIW, this has been assigned CVE-2005-4890 in the mean time. This has low impact, but it would be nice if we could fix this up in a stable point update for Squeeze. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org