Hello Florian,

Florian Weimer wrote:

Package: chmlib
Version: 0.36-3
Severity: grave
Tags: security

Advisory: chmlib exploitable buffer overflow

Product:          chmlib
Affected Version: <=0.36
Immune Version:   >0.36
OS:               Tested on linux 2.4 probably other OS affected as well
Date:             26.10.2005
Author:           Sven Tantau - http://www.sven-tantau.de/
Vendor-URL:       http://morte.jedrea.com/%7Ejedwin/projects/chmlib/
Vendor-Status:    informed, vendor released a fixed version
Advisory-URL:     
http://www.sven-tantau.de/public_files/chmlib/chmlib_20051126.txt

This issue appears to be different from Debian bug #327431.


I can not upload chmlib 0.37 for the moment because the version 0.36-4 is in new [1] and need manual validation from ftp-master. I will upload chmlib 0.37 as soon as 0.36-4 is accepted.

Best Regards.
[1] http://ftp-master.debian.org/new.html


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to