Re: squeeze update of dwarfutils?

2015-12-16 Thread Troy Heber
On 12/16/15 18:44, Guido Günther wrote: > > It doesn't segfault but I added this note to dla-needed (so I remember > why I think it's affected): > > dwarfutils > NOTE: exploit does not crash dwarfutils but _dwarf_get_abbrev_for_code > lacks the check > > I do think it would be good to add the

Re: squeeze update of dwarfutils?

2015-12-15 Thread Troy Heber
On 12/11/15 11:21, Guido Günther wrote: > the Debian LTS team would like to fix the security issues which are > currently open in the Squeeze version of dwarfutils: > https://security-tracker.debian.org/tracker/CVE-2015-8538 > > Would you like to take care of this yourself? According to the RHE