https://bugzilla.redhat.com/show_bug.cgi?id=1206739 --- Comment #12 from Athmane Madjoudj <athmanem@xxxxxxxxx> --- (In reply to Paul Howarth from comment #10) > I believe this package should be patched for CVE-2012-2417. True, it is fixed in -4, thank you for noticing this issue. -- You are receiving this mail because: You are on the CC list for the bug. You are always notified about changes to this product and component _______________________________________________ package-review mailing list package-review@xxxxxxxxxxxxxxxxxxxxxxx https://admin.fedoraproject.org/mailman/listinfo/package-review