[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Bug#786783: ufraw: CVE-2015-3885: input sanitization flaw leading to buffer overflow



On 2015-06-03 17:00, Hubert Chathi wrote:
I have fixed the security issue below for ufraw.  The security team has
marked the issue as no-dsa, but has suggested that it be fixed via
jessie-pu.  Please let us know whether this update will be allowed.  (I
understand that we'll miss the point release this Saturday.)

Here is an interdiff between the current jessie version and the updated
version:

Please file a p-u bug against the release.debian.org psuedo-package.

Regards,

Adam


Reply to: