#1890: Please tag eggdrop-1.6.19-4.fc11 into dist-f11 (CVE-2009-1789)

[Fedora Release Engineering]

#1890: Please tag eggdrop-1.6.19-4.fc11 into dist-f11 (CVE-2009-1789)
-----------------------------+----------------------------------------------
 Reporter:  robert           |       Owner:  rel-eng at lists.fedoraproject.org
     Type:  task             |      Status:  new                            
Milestone:  Fedora 11 Final  |   Component:  koji                           
 Keywords:                   |  
-----------------------------+----------------------------------------------
 Please tag eggdrop-1.6.19-4.fc11 into dist-f11 (CVE-2009-1789):

   * https://bugzilla.redhat.com/show_bug.cgi?id=502650
   * https://bugzilla.redhat.com/show_bug.cgi?id=502652


 {{{
 [21:59:27] < rsc> f13: are security fixes for tagging into dist-f11 still
 accepted?
 [21:59:56] < f13> rsc: depends...
 [22:00:18] < rsc> f13: on what? CVE fix for package being not on DVD
 media.
 [22:02:22] < f13> rsc: on the severity of the flaw, the risk of the fix,
 etc...
 [22:02:34] < rsc> f13: CVE-2009-1789
 [22:05:04] < f13> CVE-2009-1789 is not yet referenced in any VUPEN
 Security Advisory.
 [22:05:43] < f13> rsc: have a direct link?
 [22:06:40] < rsc> f13: bugzilla.redhat.com/CVE-2009-1789 or so. It's the
 bug alias.
 [22:06:50] < rsc> f13: https://bugzilla.redhat.com/show_bug.cgi?id=502650
 [22:06:52] < buggbot> Bug 502650: high, high, ---, security-response-team,
 NEW, CVE-2009-1789 eggdrop DoS (crash)
 [22:07:47] < f13> meh, small fix, and not a real bad bug, but *shrug* I
 guess we could get it in
 [22:08:14] < rsc> f13: I won't fill a ticket, if you tell me, you'll
 anyway close/invald
 [22:08:35] < f13> I just said we could get it in
 }}}

-- 
Ticket URL: <https://fedorahosted.org/rel-eng/ticket/1890>
Fedora Release Engineering <http://fedorahosted.org/rel-eng>
Release Engineering for the Fedora Project