[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Please consider bzip2 1.0.2-7 for sarge



On Sun, May 29, 2005 at 10:47:27AM +1000, Anibal Monsalve Salazar wrote:
> Please consider bzip2 1.0.2-7 for sarge. It fixes security vulnerability
> CAN-2005-1260, RC bug #310803, and #293581.

> Closes: 293581 310803
> Changes: 
>  bzip2 (1.0.2-7) unstable; urgency=high
>  .
>    * Fixed "CAN-2005-1260 decompression bomb vulnerability", closes: #310803.
>      Patch by Martin Pitt <martin.pitt@ubuntu.com>.
>    * Fixed "Example provided in documentation causes data loss", closes:
>      #293581. Patch by Adam Borowski <kilobyte@mimuw.edu.pl>.

Approved,

Thanks,
-- 
Steve Langasek
postmodern programmer

Attachment: signature.asc
Description: Digital signature


Reply to: