mailing list archives
Re: Re: Issue with PYTHON_EGG_CACHE
From: Kurt Seifried <kseifried () redhat com>
Date: Mon, 16 Dec 2013 18:59:53 -0700
-----BEGIN PGP SIGNED MESSAGE-----
On 12/16/2013 10:14 AM, Yves-Alexis Perez wrote:
On Sun, Dec 15, 2013 at 02:06:59PM -0700, Kurt Seifried wrote:
On 12/15/2013 01:23 PM, Jeremy Stanley wrote:
On 2013-12-15 14:47:12 -0500 (-0500), cve-assign () mitre org
This message seems to disclose a vulnerability in an
unspecified version of OpenStack Swift.
Use CVE-2013-7109 for this report about OpenStack Swift.
Again, CVE-2013-7109 is not an ID for which setuptools is the
I don't think this was intended as a CVE request. The
OpenStack VMT had already determined this was non-exploitable
in Swift over the course of https://launchpad.net/bugs/1192966
and explicitly decided not to request a CVE nor issue an
Sorry yeah I should have been more clear, I was trying to show
that it's a pretty common coding pattern to use /tmp for
PYTHON_EGG_CACHE, that specific instance was a bad one (it's
about the only example where it isn't actually a vulnerability
Does this mean CVE-2013-7109 should be REJECTed or not?
Sorry I misspoke, the last week has been not good, I was supposed to
be on PTO and instead hurt my back and was taking pain pills, my focus
was not so very good. Everything is as it should be CVE wise with
respect to PYTHON_EGG_CACHE dir thing.
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (GNU/Linux)
-----END PGP SIGNATURE-----