[Pkg-ltsp-devel] Bug#663645: [CVE-2012-1166] ldm allows for a passwordless root shell

Luciano Bello luciano at debian.org
Mon Mar 12 22:41:10 UTC 2012


Package: ldm
Severity: important
Tags: security patch

The following vulnerability had been reported against ldm: 
http://www.openwall.com/lists/oss-security/2012/03/12/5

The patch can be found in the report.

Please use CVE-2012-1166 for this issue.

Cheers,
/luciano
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: This is a digitally signed message part.
URL: <http://lists.alioth.debian.org/pipermail/pkg-ltsp-devel/attachments/20120312/3dfcdaac/attachment.pgp>


More information about the Pkg-ltsp-devel mailing list