On Sat, Dec 02, 2006 at 01:54:57PM +0100, Stefan Fritsch wrote:
> Package: lha
> Version: 1.14i-10
> Severity: grave
> Tags: security
> Justification: user security hole
> 
> 
> LHA seems to be affected by 
> CVE-2006-4335
> CVE-2006-4337
> CVE-2006-4338

If GNU gzip can handle LHA archives I'm wondering if the non-free
lha is really worth keeping?

Cheers,
        Moritz


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to