Re: CVE Request (mercurial)

[Christian Hoffmann <hoffie () gentoo org>]

On 2008-09-29 16:13, Ludwig Nussel wrote:
> Josh Bressers wrote:
> > Looks like there's one more flaw in Mercurial we missed:
> > http://www.selenic.com/mercurial/wiki/index.cgi/WhatsNew#head-905b8adb3420a77d92617e06590055bd8952e02b
> >
> > * hgweb: fix "allowpull" permission being ignored when pulling from hgweb
>
> Did anyone assign a CVE number for this issue yet?
Looks like CVE-2008-4297 [1] has been assigned to this issue, at least
our bug [2] mentions it and the description matches. ;o)

[1] http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-4297
[2] https://bugs.gentoo.org/show_bug.cgi?id=239055

-- 
Christian Hoffmann

Attachment: signature.asc
Description: OpenPGP digital signature