Dear Maintainer,
I have filed a patch for set_init_args (thus the bugs related to these
four functions are fixed completely) to upstream on github, which has
been merged into its master branch 6 hours ago.
Please check.
On Sun, 18 Oct 2015 17:31:08 -0400 Eric Dorland wrote:
> * persmule (pe
Dear Maintainer,
I don't know whether it is easy to exploit. But I believe every memory
bug related to a security-oriented package is grave.
By the way, I managed creating a patch locally, may it be useful for you.
Persmule
On Sun, 18 Oct 2015 17:31:08 -0400 Eric Dorland wrote:
> *
Dear Maintainer,
I don't know whether it is easy to exploit. But I believe every
memory bug related to a security-oriented package is grave.
By the way, I managed creating a patch locally, may it be useful for
you.
Persmule
On Sun, 18 Oct
Package: libengine-pkcs11-openssl
Version: 0.1.8-5
Severity: grave
Tags: security
Justification: user security hole
Dear Maintainer,
Functions in src/engine_pkcs11.c to set static global data (set_module,
set_pin, get_pin and set_init_args) do not free memories pointed by the
corresponding pointe
4 matches
Mail list logo