Hosting Provided By

t1lib security flaw: CVE-2007-4033/#439927

From: Artur R. Czechowski <arturcz(at)hell.pl>
Date: Sun Sep 16 2007 - 14:28:26 EDT

forwarded 439927 rainer.menzner@web.de
tag 439927 patch confirmed upstream
severity 439927 serious
found 439927 5.1.0-2
thanks

Hi,
The t1lib 5.1.0 available in Debian (either etch as lenny and sid[1]) is vulnerable to CVE-2007-4033 security flaw. Upstream version 5.1.1 is vulnerable too. Upstream has been informed about the issue.

I attached a patch solving the issue.

Best regards

Artur

[1] sarge probably too, I didn't check it.

-- 
Po co mamy ze sob± rozmawiaæ, skoro tak ³atwo siê komunikowaæ?
						/Jean Baudrillard/

-- To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org

text/x-diff attachment: t1env.patch

application/pgp-signature attachment: Digital signature

Received on Sun Sep 16 14:29:05 2007

Do you need help?

This message: [ Message body ]
Next message: Torsten Werner: "Re: t1lib security flaw: CVE-2007-4033/#439927"
Previous message: cord(at)murphy.debian.org: "Debian-Bounce-Test debian-security@lists.debian.org Sat, 15 Sep 2007 14:06:49 +0000"
Next in thread: Torsten Werner: "Re: t1lib security flaw: CVE-2007-4033/#439927"
Reply: Torsten Werner: "Re: t1lib security flaw: CVE-2007-4033/#439927"

Contemporary messages sorted: [ By Date ] [ By Thread ] [ By Subject ] [ By Author ] [ By messages with attachments ]

This archive was generated by hypermail 2.1.8 : Sun Oct 07 2007 - 07:53:02 EDT