Bug#629688: libvte9: malicious escape sequence causes gnome-terminal to crash (memory consumption DoS)

Josselin Mouette joss at debian.org
Tue Jun 14 22:20:32 UTC 2011


Le mardi 14 juin 2011 à 09:17 +0200, Josselin Mouette a écrit : 
> This is CVE-2011-2198.

A fix has been released:
http://git.gnome.org/browse/vte/commit/?h=vte-0-28&id=ac71d26f067be3a21bff315c3cabf24c94360dd6

Do you think this is worth a DSA?

-- 
 .''`.      Josselin Mouette
: :' :
`. `'
  `-
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-gnome-maintainers/attachments/20110615/2658d851/attachment-0001.pgp>


More information about the pkg-gnome-maintainers mailing list