Public bug reported:

Binary package hint: valgrind

Please merge valgrind 3.3.1-3 from Debian unstable (main)

 valgrind  (1:3.3.1-3) unstable; urgency=low

   * debian/patches/01_valgrindrc.dpatch:
     - New patch to avoid reading and executing .valgrindrc files unless done
       by the onwer of the file. This fixes CVE-2008-4865 (Closes: #507312)

 -- Andrés Roldán <[email protected]>  Wed, 03 Dec 2008 16:42:11 +0000

** Affects: valgrind (Ubuntu)
     Importance: Medium
     Assignee: Cody A.W. Somerville (cody-somerville)
         Status: In Progress

** CVE added: http://www.cve.mitre.org/cgi-
bin/cvename.cgi?name=2008-4865

** Changed in: valgrind (Ubuntu)
   Importance: Undecided => Medium
     Assignee: (unassigned) => Cody A.W. Somerville (cody-somerville)
       Status: New => In Progress

-- 
Merge valgrind 3.3.1-3 from Debian unstable (main)
https://bugs.launchpad.net/bugs/310137
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to