[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#431858: CVE-2007-3508: Integer overflow



On Thu, Jul 05, 2007 at 03:54:10PM +0200, Laurent Bonnaud wrote:
> Package: libc6
> Version: 2.5-11
> Severity: important
> 
> 
> Hi,
> 
> here is the problem:
> 
> http://www.gentoo.org/security/en/glsa/glsa-200707-04.xml

  FWIW this has been discussed with the security team already, there is
no way to exploit this, whatever the gentoo GLSA says. It does not mean
that we won't fix it, but it's not a big problem at all, I'm not even
sure it deserves the important severity :)

Cheers,
-- 
·O·  Pierre Habouzit
··O                                                madcoder@debian.org
OOO                                                http://www.madism.org

Attachment: pgpeZVMm4eRzJ.pgp
Description: PGP signature


Reply to: