Re: PSPP-BUG: Vulnerability - PSPP

[Ben Pfaff]

The fixes are listed in the release notes for PSPP 1.0.1.

I don't know how to update that website.

On Tue, Aug 29, 2017 at 04:06:00PM -0300, Jeislan Carlos wrote:
> Thanks for have answered,
> 
> Please, how can I show that this problems were solved?
> I really would like using this software, but I have to show that this
> problems doesn't exist anymore.
> This problems will be drop of the site?
> 
> Thanks so much,
> 
> Jeislan
> 
> 2017-08-29 15:08 GMT-03:00 Ben Pfaff <address@hidden>:
> 
> > On Tue, Aug 29, 2017 at 03:02:12PM -0300, Jeislan Carlos wrote:
> > > I have asked to instalation PSPP in the company where I am working.
> > > The security team told me that PSPP has problema with his vulnerability.
> > >
> > > The information has been gotten by this link:
> > >
> > > https://www.cvedetails.com/vulnerability-list/vendor_id-
> > 72/product_id-38732/year-2017/opdos-1/GNU-Pspp.html
> > >
> > > what its means?
> >
> > All of these were fixed in PSPP 1.0.1, released yesterday.
> >
> > None of them were serious, so I wouldn't worry about them in any case.
> > The folks who reported the vulnerabilities don't understand PSPP and
> > didn't consult us until after they reported them.  The various scores
> > and levels listed on that page don't really make sense, either.
> >
> 
> 
> 
> -- 
> Jeislan Carlos
> Statistician - Data Scientist
> Strategic Marketing Specialist
> Master in Administrative Science
> (31) 98472-5489