Package: liferea Version: 1.0.26-1 Severity: normal Hello,
I'm reading planet Debian and I notice that sam has written[1] a new tool[2] to stress test video players. If I try to open the link [2] in a new tab using liferea + gtkhtml, it segfaults predictably. To reproduce the bug, I put a copy of sam's RSS at http://www.enricozini.org/store/liferea-crash.xml Just subscribe to that feed, read the entry "Exposing file parsing vulnerabilities", right click on the "zzuf" link and choose "open link in tab". I'll now switch to liferea-xulrunner, as I understood from other bug posts that it could be related to gtkhtml. [1] http://sam.zoy.org/blog/2007-01-16-exposing-file-parsing-vulnerabilities [2] http://sam.zoy.org/zzuf/ Ciao, Enrico -- System Information: Debian Release: 4.0 APT prefers testing APT policy: (500, 'testing') Architecture: amd64 (x86_64) Shell: /bin/sh linked to /bin/bash Kernel: Linux 2.6.19.1enrico Locale: LANG=it_IT.UTF-8, LC_CTYPE=it_IT.UTF-8 (charmap=UTF-8) Versions of packages liferea depends on: ii dbus-1-utils 1.0.2-1 simple interprocess messaging syst ii gconf2 2.16.0-3 GNOME configuration database syste ii libatk1.0-0 1.12.4-1 The ATK accessibility toolkit ii libc6 2.3.6.ds1-8 GNU C Library: Shared libraries ii libcairo2 1.2.4-4 The Cairo 2D vector graphics libra ii libdbus-1-3 1.0.2-1 simple interprocess messaging syst ii libdbus-glib-1-2 0.71-3 simple interprocess messaging syst ii libfontconfig1 2.4.1-2 generic font configuration library ii libgconf2-4 2.16.0-3 GNOME configuration database syste ii libglib2.0-0 2.12.4-2 The GLib library of C routines ii libgtk2.0-0 2.8.20-3 The GTK+ graphical user interface ii libice6 1:1.0.1-2 X11 Inter-Client Exchange library ii liborbit2 1:2.14.3-0.1 libraries for ORBit2 - a CORBA ORB ii libpango1.0-0 1.14.8-4 Layout and rendering of internatio ii libsm6 1:1.0.1-3 X11 Session Management library ii libx11-6 2:1.0.3-4 X11 client-side library ii libxcursor1 1.1.7-4 X cursor management library ii libxext6 1:1.0.1-2 X11 miscellaneous extension librar ii libxfixes3 1:4.0.1-5 X11 miscellaneous 'fixes' extensio ii libxi6 1:1.0.1-4 X11 Input extension library ii libxinerama1 1:1.0.1-4.1 X11 Xinerama extension library ii libxml2 2.6.27.dfsg-1 GNOME XML library ii libxrandr2 2:1.1.0.2-5 X11 RandR extension library ii libxrender1 1:0.9.1-3 X Rendering Extension client libra ii liferea-gtkhtml 1.0.26-1 gtkhtml-based rendering library fo ii zlib1g 1:1.2.3-13 compression library - runtime liferea recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
