full-disclosure - Re: [USN-960-1] libpng vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <AANLkTikozgIo6C_7AGjINDm4LwWsKC1R_ktLyzS5Zu4t@mail.gmail.com>
Date: Thu, 8 Jul 2010 15:51:54 +0200
From: Robert Święcki <robert@...ecki.net>
To: full-disclosure@...ts.grok.org.uk, bugtraq@...urityfocus.com
Subject: Re: [USN-960-1] libpng vulnerabilities

On Thu, Jul 8, 2010 at 3:39 PM, Marc Deslauriers
<marc.deslauriers@...onical.com> wrote:
> ===========================================================
> Ubuntu Security Notice USN-960-1              July 08, 2010
> libpng vulnerabilities
> CVE-2010-1205, CVE-2010-2249
> ===========================================================
>
> A security issue affects the following Ubuntu releases:
>
> Ubuntu 6.06 LTS
> Ubuntu 8.04 LTS
> Ubuntu 9.04
> Ubuntu 9.10
> Ubuntu 10.04 LTS
...
> After a standard system update you need to reboot your computer to make
> all the necessary changes.

Nice ;). What about killing a black cat to make all the necessary
changes? The same relevancy from my perspective.

Aren't we too much of 'users will not understand what a service
restart is, so let's make them restart the whole OS' here?

-- 
Robert Święcki

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/