49990 2004-05-04 10:05 0000 app-misc/mc : multiple vulnerabilities 2009-08-05 11:25:31 0000 1 1 1 Unclassified Gentoo Security GLSA Errors unspecified All All CLOSED FIXED http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2004-0226 P2 normal --- 1 koon@gentoo.org security@gentoo.org lanius@gentoo.org koon@gentoo.org 2004-05-04 10:05:25 0000 The following vulnerabilities were found by Jacub Jelinek in Midnight Commander : CAN-2004-0226 Buffer overflows CAN-2004-0231 Insecure temporary file and directory creations CAN-2004-0232 Format string problems No fix version, patches are backports from the CVS version. Already published advisories : http://www.mandrakesecure.net/en/advisories/advisory.php?name=MDKSA-2004:039 http://www.debian.org/security/2004/dsa-497 solar@gentoo.org 2004-05-04 10:52:30 0000 Koon, Do you have a patch put together that patches clean for gentoo? koon@gentoo.org 2004-05-04 11:31:27 0000 I haven't a patch yet. I can try to derive one from the Mandrake advisory, but it will probably be unclean. Heinrich : can you try to build a patch from the mc CVS ? If not, I will try to put something together from the Mandrake sources... -K lanius@gentoo.org 2004-05-08 03:34:53 0000 sorry for taking so long, added the security patch and marked stable on x86, other arches please test koon@gentoo.org 2004-05-09 11:12:25 0000 Adding arches -- please test and mark app-misc/mc-4.6.0-r7 stable. kloeri@gentoo.org 2004-05-09 13:49:25 0000 Stable on alpha. kloeri@gentoo.org 2004-05-09 13:50:20 0000 Didn't mean to close the bug.. :) gustavoz@gentoo.org 2004-05-09 14:30:38 0000 Stable on hppa & sparc. lu_zero@gentoo.org 2004-05-10 05:19:18 0000 Marked ppc kumba@gentoo.org 2004-05-14 20:15:47 0000 Stable on mips. koon@gentoo.org 2004-05-21 00:56:34 0000 amd64, ia64 : please mark stable lanius@gentoo.org 2004-05-24 05:29:05 0000 amd64, ia64 : please mark stable jhuebel@gentoo.org 2004-05-25 11:27:05 0000 stable on amd64 koon@gentoo.org 2004-05-26 10:41:52 0000 GLSA 200405-21