Re: [SECURITY] [DSA 1422-1] New e2fsprogs packages fix arbitrary code execution

On Fri Dec 07, 2007 at 09:46:21 -0500, Juan Gallego wrote:

> | For the stable distribution (etch), this problem has been fixed in version
> | 1.39+1.40-WIP-2006.11.14+dfsg-2etch1.
>
> | For the unstable distribution (sid), this problem will be fixed shortly.

> is sarge affected by this vulnerability? or has sarge been archived and i
> missed the announcement?

  Sarge is affected, but I don't yet have a working patch for that.

  There should be an update shortly, but this is pretty low-risk and  it seemed sensible to release now, rather than waiting.

Steve

-- 


-- 
To UNSUBSCRIBE, email to debian-security-REQUEST@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org