Re: package with security hole not flagged at build time

To: "Steven M. Bellovin" <smb%cs.columbia.edu@localhost>
Subject: Re: package with security hole not flagged at build time
From: Adrian Portelli <adrianp%stindustries.net@localhost>
Date: Sat, 13 Jan 2007 16:19:51 +0000

Steven M. Bellovin wrote:
...
>>>             --Steve Bellovin, http://www.cs.columbia.edu/~smb
>> Just as a matter of interest if you install the package and then run
>> audit-packages does it pick it up as being vulnerable ?
>>
> 
> Yes...
> 
>               --Steve Bellovin, http://www.cs.columbia.edu/~smb

Hi Steven,

Just one additional bit of information . . .

Do you have PKGVULNDIR set anywhere (mk.conf, audit-packages.conf,
environment) or have you played with it of late ?

thanks,

adrian.

Follow-Ups:
- Re: package with security hole not flagged at build time
  - From: Steven M. Bellovin

References:
- package with security hole not flagged at build time
  - From: Steven M. Bellovin
- Re: package with security hole not flagged at build time
  - From: Geert Hendrickx
- Re: package with security hole not flagged at build time
  - From: Steven M. Bellovin
- Re: package with security hole not flagged at build time
  - From: Adrian Portelli
- Re: package with security hole not flagged at build time
  - From: Steven M. Bellovin

Prev by Date: Re: modular xorg headers: why lib dependencies?
Next by Date: Re: package with security hole not flagged at build time
Previous by Thread: Re: package with security hole not flagged at build time
Next by Thread: Re: package with security hole not flagged at build time
Indexes:

Home | Main Index | Thread Index | Old Index