[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: PSPP-BUG: Vulnerability - PSPP
|
From: |
Ben Pfaff |
|
Subject: |
Re: PSPP-BUG: Vulnerability - PSPP |
|
Date: |
Tue, 29 Aug 2017 11:08:49 -0700 |
|
User-agent: |
Mutt/1.5.23 (2014-03-12) |
On Tue, Aug 29, 2017 at 03:02:12PM -0300, Jeislan Carlos wrote:
> I have asked to instalation PSPP in the company where I am working.
> The security team told me that PSPP has problema with his vulnerability.
>
> The information has been gotten by this link:
>
> https://www.cvedetails.com/vulnerability-list/vendor_id-72/product_id-38732/year-2017/opdos-1/GNU-Pspp.html
>
> what its means?
All of these were fixed in PSPP 1.0.1, released yesterday.
None of them were serious, so I wouldn't worry about them in any case.
The folks who reported the vulnerabilities don't understand PSPP and
didn't consult us until after they reported them. The various scores
and levels listed on that page don't really make sense, either.