lesstif security vulnerability

[Hans de Goede]

Hi all,

Not using bugzilla as lesstif doesn't have a component there (yet), see:
http://lwn.net/Alerts/197396/
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4124

Regards,

Hans

[Patrice Dumas]

On Thu, Aug 31, 2006 at 08:20:39AM +0200, Hans de Goede wrote:
> Hi all,
>
> Not using bugzilla as lesstif doesn't have a component there (yet), see:
> http://lwn.net/Alerts/197396/
> http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4124

lesstif is built with --enable-production, so should not be vulnerable.
I added a comment in the spec.

--
Pat

[Luke Macken]

On Thu, Aug 31, 2006 at 08:20:39AM +0200, Hans de Goede wrote:
> Hi all,
>
> Not using bugzilla as lesstif doesn't have a component there (yet), see:
> http://lwn.net/Alerts/197396/
> http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4124

There seems to be a lesstif component under the Fedora Core product.

luke