On Tue, Feb 24, 2009 at 08:42:56AM -0500, Steve Grubb wrote:
On Tuesday 24 February 2009 01:40:40 am Gregory Maxwell wrote:
> This shouldn't have been sent to this list: It should have been filed
> as a confidential bug, it's CERT announcement material. I guess its
> too late now.
Yes, I think so, too. From a security PoV, this creates a big problem in log
correlation.
This is public as
https://bugzilla.redhat.com/show_bug.cgi?id=450304
for close to nine months now.
A bug should be filed and this should be fixed in all affected
releases ASAP.
The bug _was_ filed. Anybody pays attention?
Michal