[SECURITY] [DLA 2011-1] xmlrpc-epi security update
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Package : xmlrpc-epi
Version : 0.54.2-1.1+deb8u1
CVE ID : CVE-2016-6296
An issue in xmlrpc-epi, an XML-RPC request serialisation/deserialisation
library, has been found.
An integer signedness error in the simplestring_addn function in
simplestring.c in xmlrpc-epi could be used for a heap based buffer
overflow and possibly execution of arbitrary code.
For Debian 8 "Jessie", this problem has been fixed in version
0.54.2-1.1+deb8u1.
We recommend that you upgrade your xmlrpc-epi packages.
Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS
-----BEGIN PGP SIGNATURE-----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=VhX7
-----END PGP SIGNATURE-----
Reply to: