[Bug 674656] New: Moolight is vulnerabe to CVE-2010-4254
https://bugzilla.novell.com/show_bug.cgi?id=674656 https://bugzilla.novell.com/show_bug.cgi?id=674656#c0 Summary: Moolight is vulnerabe to CVE-2010-4254 Classification: openSUSE Product: openSUSE 11.4 Version: Factory Platform: Other OS/Version: Other Status: NEW Severity: Critical Priority: P5 - None Component: Mono AssignedTo: bnc-team-mono@forge.provo.novell.com ReportedBy: cmorve69@yahoo.es QAContact: qa@suse.de CC: ajorgensen@novell.com, meissner@novell.com, coolo@suse.de Found By: Community User Blocker: --- Moonlight was fixed in 11.3 for http://support.novell.com/security/cve/CVE-2010-4254.html But if you compare the fixed version, https://build.opensuse.org/package/files?package=moonlight&project=openSUSE%3A11.3:Update, with the 11.4 version, https://build.opensuse.org/package/files?package=moonlight&project=openSUSE%3A11.4, you see the fix was never submitted to Factory (no changelog entry or bnc655847.patch). Notice that I don't have a 11.4 system to test it. But the 2.3 and 2.4 Moonlight packages from Mono:Factory never worked at all since libmoon misses a rpath to find libmono (SR#62676 which supersedes SR#58720). -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c1
--- Comment #1 from Cristian Morales Vega
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c2
--- Comment #2 from Andrew Jorgensen
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c3
--- Comment #3 from Cristian Morales Vega
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c
Cristian Morales Vega
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c4
Stephan Kulow
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c5
--- Comment #5 from Cristian Morales Vega
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c6
--- Comment #6 from Andrew Jorgensen
https://bugzilla.novell.com/show_bug.cgi?id=674656
https://bugzilla.novell.com/show_bug.cgi?id=674656#c7
--- Comment #7 from Stephan Kulow
participants (1)
-
bugzilla_noreply@novell.com