[ubuntu/quantal] mcrypt 2.6.8-1.2 (Accepted)

Logan Rosen logatronico at gmail.com
Sun Sep 16 09:35:20 UTC 2012


mcrypt (2.6.8-1.2) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix three other buffer overflows in check_file_head.
  * Fix use of uninitialized data when no salt is used.
  * Enable hardening flags.

mcrypt (2.6.8-1.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * CVE-2012-4409: buffer overflow when decrypting a file with a too
    long salt.
  * No id: format-string attacks via file name arguments and possibly
    others.

Date: 2012-09-16 04:19:59.614525+00:00
Signed-By: Felix Geyer <debfx-pkg at fobos.de>
https://launchpad.net/ubuntu/quantal/+source/mcrypt/2.6.8-1.2
-------------- next part --------------
Sorry, changesfile not available.


More information about the Quantal-changes mailing list