Bug#344980: uudeview and CAN-2004-2265
On Wed, Mar 22, 2006 at 11:20:50PM +0100, Matej Vela wrote:
> Justin Pryzby <justinpryzby@users.sourceforge.net> writes:
>
> > BTW, how did you determine that uudeview was included in them? I have
> > filed #344980 which I would use if it were available ..
>
> I searched the archive with a home-brewn script [2] (a local mirror
> helps :-). IIRC the security team has something similar. Note that
> solving #344980 won't help with dbs-style embedded tarballs, e.g. it
> wouldn't have caught goldedplus.
I'm sending this to that bug to proactively ensure that when source
package lists become available, that embedded tarballs, zipballs, etc.
are somehow included.
Reply to: