N/A: Re: [alerts-security] [DLA 32-1] nspr security update

[Frank Baalbergen <frank.baalbergen@mendix.com>]

On 08/07/2014 08:21 PM, Thorsten Alteholz wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Package        : nspr
> Version        : 4.8.6-1+squeeze2
> CVE ID         : CVE-2014-1545
>
> Abhiskek Arya discovered an out of bounds write in the cvt_t() function
> of the NetScape Portable Runtime  Library which could result in the
> execution of arbitrary code.
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.6 (GNU/Linux)
>
> iD8DBQFT48Oi02K2KlS5mJARAmDRAJ4lA55XQjK8Wy36SrSmBtarcO4GjQCeIloX
> hriHlgK8hlv+phMZ9towkh4=
> =ptsW
> -----END PGP SIGNATURE-----

Not used.

--
Frank Baalbergen - System / Network Engineer
T +31 (0)10 2760434 | frank.baalbergen@mendix.com | www.mendix.com