Hi, On Wed, Mar 05, 2014 at 03:47:24PM +0100, Christoph Biedl wrote: > Salvatore Bonaccorso wrote... > > > Upstream has fixed a memory leak in file. Upstream commit is at [1]. > > Thanks, will cherry-pick that just-in-case for unstable as the next > upstream release will probably take a few weeks.
Thanks! > > AFAICS this was introduced in [2] so in 5.14. > > Do you see an implication for security? While I can think of some > synthetic use cases where this might be exploited, I don't see a real > problem. It shouldn't be possible to leak more than just a few hundred > bytes each time. Agree with you. Salvatore
signature.asc
Description: Digital signature