Package: xchat
Severity: important

Hi,
the following CVE (Common Vulnerabilities & Exposures) id was
published for xchat.

CVE-2009-0315[0]:
| Untrusted search path vulnerability in the Python module in xchat
| allows local users to execute arbitrary code via a Trojan horse Python
| file in the current working directory, related to a vulnerability in
| the PySys_SetArgv function (CVE-2008-5983).

The redhat bugreport[1] contains some additional information.

For stable, this issue could be fixed via stable-proposed-updates.

If you fix the vulnerability please also make sure to include the
CVE id in your changelog entry.

Cheers
Steffen

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0315
    http://security-tracker.debian.net/tracker/CVE-2009-0315
[1] https://bugzilla.redhat.com/show_bug.cgi?id=481560



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to