it appears that the recent abiword issue (CVE-2006-4513) was fixed in sid a while back (see bug #396360 [1]). it doesn't appear that the abiword maintainer ever sent a message to let the security team know about this. however, in the thread for that bug, he did say "I believe this bug has been fixed in sarge, etch, and sid. Thanks for those of you who were involved." the bug is currently marked as resolved. hence it appears that the issue is indeed fixed in sid and should be removed from the latently vulnerable list [2].
thanks for the hard work. [1] http://bugs.debian.org/396360 [2] http://security-tracker.debian.net/tracker/data/latently-vulnerable -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
