merge 342281 342337
thanks

On Wed, Dec 07, 2005 at 10:30:15AM +0100, Jan Niehusmann wrote:
> Package: xpdf-reader
> Version: 3.00-13
> Severity: grave
> Tags: security patch
> Justification: user security hole
> 
> CAN-2005-3193 lists a security hole of xpdf. A fix is available at 
> http://www.foolabs.com/xpdf/download.html (the patch seems to be
> suitable for a security update - only overflow protection added, no new
> features). It applies cleanly to the debian package.
> 
> Reportbug just told me there is a new version in incoming. I guess it'll
> fix the issue, but I decided to still post this report mainly for
> reference.

Thanks, but your report is identical to #342281.

The fixed version is an update to 3.01, not 3.00.

#342281 is already fixed in unstable. sarge and woody fixes are pending
(as we need to create our own patch).


Hamish
-- 
Hamish Moffatt VK3SB <[EMAIL PROTECTED]> <[EMAIL PROTECTED]>


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to