Geoff, thanks for the follow-up! Seems that we should get 2.2.0-final
into Intrepid (we have beta5 at the moment). Jonathan, any chance you
could test the 2.2.0-1 from Debian experimental? If it works, we should
sync it over.

I do consider it security sensitive in a way that such file formats are
often taken from unknown third-party sources. Thus this provides the
classical vector of putting a crafted .cml (or other format) somewhere
and luring people to open it, which would then run arbitrary code on
their systems. Of course our current measures of SSP, ASLR, and
FORTIFY_SOURCE make this hard to do, but a general source code review
still can't hurt.

Thanks, Martin

-- 
main inclusion review for openbabel
https://bugs.launchpad.net/bugs/236051
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to