Re: (CVE-2007-0855) Preparation of the next stable Debian GNU/Linux update

To: 410580@bugs.debian.org
Cc: debian-release@lists.debian.org, debian-security@lists.debian.org
Subject: Re: (CVE-2007-0855) Preparation of the next stable Debian GNU/Linux update
From: Touko Korpela <tkorpela@phnet.fi>
Date: Sat, 29 Dec 2007 12:40:40 +0200
Message-id: <[🔎] 20071229104040.GA5960@tiikeri.vuoristo.local>
In-reply-to: <20070520183316.GI14281@ftbfs.de>
References: <20070519214822.GA17368@ries.debian.org> <20070520142919.GA29068@tiikeri.vuoristo.local> <20070520183316.GI14281@ftbfs.de>

On Sun, May 20, 2007 at 08:33:16PM +0200, Martin Zobel-Helas wrote:
> On Sun May 20, 2007 at 17:29:19 +0300, Touko Korpela wrote:
> > Unrar (source package unrar-nonfree) has CVE-2007-0855 (Stack-based buffer
> > overflow) bug in etch and sarge. It has debian bug #410580
> > Maintainer didn't ask for it but should 1:3.7.3-1 be included in 4.0r1?
> 
> yes, please upload.

Unrar-nonfree is still vulnerable after last etch update. Maybe somebody
should upload fixed version finally?

Reply to:

Follow-Ups:
- Re: (CVE-2007-0855) Preparation of the next stable Debian GNU/Linux update
  - From: Luk Claes <luk@debian.org>

Prev by Date: mipsel packages file borken
Next by Date: hint request: complearn-gui
Previous by thread: mipsel packages file borken
Next by thread: Re: (CVE-2007-0855) Preparation of the next stable Debian GNU/Linux update
Index(es):
- Date
- Thread