not to beat a dead horse

Jake Edge jake at lwn.net
Mon Mar 10 18:20:08 UTC 2008


but I am trying to puzzle out the kronolith advisories.  They do not 
include either a CVE reference or a bugzilla reference.  One contains 
the changelog, one not.  And the description of the problem is as follows:

Fix privilege escalation in Horde API.  Fix missing ownership validation 
on share changes.

This is for FEDORA-2008-2221 and FEDORA-2008-2212.

How am I (or anyone) supposed to figure out what's going on here?

thanks!

jake

-- 
Jake Edge - LWN - jake at lwn.net - http://lwn.net




More information about the security mailing list