On Thu Aug 09, 2007 at 01:07:47 +1000, Steffen Joeris wrote:
> Package: zziplib
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> Hi
> 
> The following CVE[0] has be issued against zziplib.

  This seems to be a low-risk, from the one page I found describing
 it:

 
http://www.securitylab.ru/forum/read.php?FID=21&TID=40858&MID=326187#message326187

  Basically "zzcat $longfilename" crashes.  I wouldn't have thought
 this would require a DSA.

Steve
--


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to