[Rpm-maint] rpm security exposure http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2059

[pinto.elia at gmail.com]

Which system, vendor os, distro are you using ? Some more Info could be useful .
-----Original Message-----
From: swamy sangamesh
Sent:  01/11/2010, 08:19 
To: rpm-maint at lists.rpm.org
Subject: [Rpm-maint] rpm security exposure http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2059


Hi All,

We come to know about rpm security exposure
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-2059
looks like fix is available from 4.5.x source. But unfortunately we are
using older rpm-3.0.5, and due to some
dependency, upgrading to newer version is extremely  difficult.

I have not much knowledge about rpm source code.
My question is, the fix available can also be applied to older versions of
rpms like-3.0.5
is their patch available for older version so if anyone which can't  upgrade
to latest version
can apply and use it ?

-- 
Thanks & Regards,
Sangamesh

:::0:a627e496183fb85c716155a02af347be:-1:x:::