Dear Andreas, > #329156: [CAN-2005-0023] /usr/sbin/gnome-pty-helper: writes arbitrary utmp > records > libzvt was removed from Debian in 2008, see #195969 for details on the > removal.
I now see gnome-pty-helper being part of packages libvte9 libvte-2.90-9 libvte-2.91-0 and I wonder whether those are just as vulnerable. Should I file bug reports against those packages, or would you be able to re-assign this but to each of those? Thanks, Paul Paul Szabo p...@maths.usyd.edu.au http://www.maths.usyd.edu.au/u/psz/ School of Mathematics and Statistics University of Sydney Australia