Marc Espie <[email protected]> writes:

> I found a bug in install-info that translates to a minor CVE on
> any distribution that packages info files blindly.
>
> I'd rather not discuss it on a public mail-list, unless you're happy with
> it.
>
> Please contact me directly or direct me to an address for security
> sensitive bugs.

This is also of interest to Gentoo - please CC Sam and I in discussion.

(I've added Sam to CC on this email)
-- 
Arsen Arsenović

Attachment: signature.asc
Description: PGP signature

Reply via email to