-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Package : xmlrpc-epi Version : 0.54.2-1.1+deb8u1 CVE ID : CVE-2016-6296
An issue in xmlrpc-epi, an XML-RPC request serialisation/deserialisation library, has been found.
An integer signedness error in the simplestring_addn function in simplestring.c in xmlrpc-epi could be used for a heap based buffer overflow and possibly execution of arbitrary code.
For Debian 8 "Jessie", this problem has been fixed in version 0.54.2-1.1+deb8u1. We recommend that you upgrade your xmlrpc-epi packages. Further information about Debian LTS security advisories, how to apply these updates to your system and frequently asked questions can be found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQKTBAEBCgB9FiEEYgH7/9u94Hgi6ruWlvysDTh7WEcFAl3dmjhfFIAAAAAALgAo aXNzdWVyLWZwckBub3RhdGlvbnMub3BlbnBncC5maWZ0aGhvcnNlbWFuLm5ldDYy MDFGQkZGREJCREUwNzgyMkVBQkI5Njk2RkNBQzBEMzg3QjU4NDcACgkQlvysDTh7 WEfAqw/+MKbqm7p6xUne9lOfBGzEn9ZoL1LA9f59JXIDOCzyTP53apK+csWbbK7C JPsjAfHOt6Ew/+IN7jVtQVe96cPH4HZsqexhenJ4kEtZTl0rEic04WULpYPqhCYX IYPCvux5+zcvvXgreaapiKH2VOFjjN5qwkNSrqD4qh0jYbE77YZ97P5jN9ruEf78 siKkwT0ggLw/NqZBZRl5CyLOqrafUHCSZ3MLL+M7rI14cEdftz9oxfWlphoVMqdB uMRXIQ3a2ylI5nhKOeET2EOAYWQm38b8dl53ZGsxnUKdAnPSPyPfJZ8wvBGPNLw8 XaKBoNGzR83NTvzvir7CzdQiIsQYPLT2vAXGELVUUICQwjE/CpftmzAxn8d6Uv/Z IlynCJk9K8aWVkSItrPcEZRaFm1G36uj9pkatY40e/CLFDvb1FPEzjgHJrEoeo05 95/qXti6F2flE09G1O4b3mNtoKL5zOi9tTSLm5yBpuCaYXLmTQpWuSSJXWMRuX6M 734WXe2N8y7yeX8ZU96v6NMWeOhwiXqHuxRwM3IhzXJDK7FQdfb1ppxK8dO6INca sY39rVNsS1mUNLypfX/rRo2UIZM6xKxV+6YixNZO86PAW2Ir0IrHmv6socHjsJ5A gDVTZe4d5jdpY2AC/kIt3rI3N1vDob3DsSUk5Pe0XPs/RnAcK9g= =VhX7 -----END PGP SIGNATURE-----
