On Thu, Dec 07, 2006, Kees Cook wrote: > This is the same vulnerability as reported against gv as bug 398292, > since evince has old gv code embedded (I've updated the wiki to reflect > this: http://wiki.debian.org/EmbeddedCodeCopies)
Thanks for the bug and the patch! I had flagged the Ubuntu security notice, but didn't have time to upload it yet. I saw that you updated 0.4 and 0.6, but not 0.1; perhaps you do not ship evince 0.1 anymore, but if you do, do you know whether is it affected? Thanks again, -- Loïc Minier <[EMAIL PROTECTED]> "I have no strong feelings one way or the other." -- Neutral President