Bug#417789: this doesn't seem like a security issue

2007-04-05 Thread Arnaud Giersch
On Wed, Apr 04, 2007 at 08:04:52PM +0300, Eddy Petri\u0219or wrote: I tagged this bug as grave+security because it can be used to make elinks load any corrupted file, and possibly execute arbitrary code. How? Those are only strings. Nothing is executed from po/mo/gmo files. Beside the

Bug#417789: this doesn't seem like a security issue

2007-04-04 Thread Eddy Petrișor
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 tags 417789 -security thanks I tagged this bug as grave+security because it can be used to make elinks load any corrupted file, and possibly execute arbitrary code. How? Those are only strings. Nothing is executed from po/mo/gmo files. Imagine

Bug#417789: this doesn't seem like a security issue

2007-04-04 Thread Steve Langasek
tags 417789 security thanks On Wed, Apr 04, 2007 at 08:04:52PM +0300, Eddy Petrișor wrote: I tagged this bug as grave+security because it can be used to make elinks load any corrupted file, and possibly execute arbitrary code. How? Those are only strings. Nothing is executed from po/mo/gmo