Package: gnumeric
Severity: important
Tags: security
Gnumeric embeds a copy of the PCRE regexp library, which is vulnerable
to an exploitable heap overflow. (CAN-2005-2491)
According to
http://mail.gnome.org/archives/gnumeric-list/2005-August/msg00073.html
upstream doubts that it's exploitable in Gnumeric, though.
Cheers,
Moritz
-- System Information:
Debian Release: testing/unstable
APT prefers unstable
APT policy: (500, 'unstable')
Architecture: i386 (i686)
Shell: /bin/sh linked to /bin/bash
Kernel: Linux 2.6.13
Locale: LANG=C, [EMAIL PROTECTED] (charmap=ISO-8859-15)
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
