Bug#326628: gnumeric: Gnumeric embeds copy of vulnerable PCRE code

2005-09-05 Thread J.H.M. Dassen (Ray)
On Sun, Sep 04, 2005 at 18:04:19 +0200, Moritz Muehlenhoff wrote: > According to > http://mail.gnome.org/archives/gnumeric-list/2005-August/msg00073.html > upstream doubts that it's exploitable in Gnumeric, though. Upstream's position on this hasn't changed: [21:29] <@gmorten> JHM: Debian 326628

Bug#326628: gnumeric: Gnumeric embeds copy of vulnerable PCRE code

2005-09-04 Thread Moritz Muehlenhoff
Package: gnumeric Severity: important Tags: security Gnumeric embeds a copy of the PCRE regexp library, which is vulnerable to an exploitable heap overflow. (CAN-2005-2491) According to http://mail.gnome.org/archives/gnumeric-list/2005-August/msg00073.html upstream doubts that it's exploitable in