Source: chicken Version: 4.9.0.1-1 Severity: grave Tags: security upstream patch
Hi, the following vulnerabilities were published for chicken. CVE-2016-6830[0]: |Buffer overrun in CHICKEN Scheme's "process-execute" and |"process-spawn" procedures from the posix unit CVE-2016-6831[1]: |Memory leak in CHICKEN Scheme's process-execute and process-spawn |procedures The upstream patch [2] addresses both CVEs. If you fix the vulnerabilities please also make sure to include the CVE (Common Vulnerabilities & Exposures) ids in your changelog entry. For further information see: [0] https://security-tracker.debian.org/tracker/CVE-2016-6830 [1] https://security-tracker.debian.org/tracker/CVE-2016-6831 [2] https://lists.nongnu.org/archive/html/chicken-hackers/2016-07/txtSWHYeFeG0R.txt Regards, Salvatore
