[prev in list] [next in list] [prev in thread] [next in thread] 

List:       oss-security
Subject:    [oss-security] ConnMan #ConnManDo Vulnerability
From:       "Daisuke Noguchi[NRI$B%;(B =?ISO-2022-JP?B?GyRCJ
Date:       2017-08-29 15:54:23
Message-ID: 20170830005418.4E30.93016A1C () nri-secure ! co ! jp
[Download RAW message or body]

Hi ALL

We have published the web page which describes about detail of CVE-2017-12865, ConnMan vulnerability.
http://connmando.nri-secure.co.jp/index.html

This patch has been merged to master branch of debian and yocto Linux distribution.
And now we are trying to communicate with other Linux distribution security teams.
- [debian][DSA 3956-1] connman security update
  https://www.debian.org/security/2017/dsa-3956
- [yocto]connman: Fix for CVE-2017-12865
  http://git.yoctoproject.org/cgit/cgit.cgi/poky/commit/?id=9086b525dd00f482ea68a384540cd30778413c9e

If it would be worth posting, could you please deal with it.

Best regards,

------------------------------------------------------------
Daisuke Noguchi
Seinor Security Consultant
NRI Secure Technologies, Ltd. Cyber Security Technical Development Department
Tokyo Office   TEL +81-3-6831-8514 Fax +81-3-6706-0599



----------------------------------------------------------------
$B$3$N%a!<%k$O!"K\Mh$N08@h$NJ}$N$_$K8BDj$5$l$?5!L)>pJs$,4^$^$l$F$$(B
$B$k>l9g$,$4$6$$$^$9!#$*?4$"$?$j$N$J$$>l9g$O!"Aw?.<T$K$4O"Mm$N$&$(!"(B
$B$3$N%a!<%k$r:o=|$$$?$@$-$^$9$h$&$*4j$$?=$7>e$2$^$9!#(B

PLEASE READ :This e-mail is confidential and intended for the
named recipient only. If you are not an intended recipient,
please notify the sender and delete this e-mail.
----------------------------------------------------------------
[prev in list] [next in list] [prev in thread] [next in thread]