-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.7 Date: Wed, 16 Aug 2006 10:06:30 +0000 Source: binutils Binary: binutils-dev binutils-hppa64 binutils-multiarch binutils binutils-doc Architecture: i386 all Version: 2.15-5ubuntu2.4 Distribution: hoary-security Urgency: low Maintainer: Ubuntu/i386 Build Daemon Changed-By: Martin Pitt Description: binutils - The GNU assembler, linker and binary utilities binutils-dev - The GNU binary utilities (BFD development files) binutils-doc - Documentation for the GNU assembler, linker and binary utilities binutils-multiarch - Binary utilities that support multi-arch targets Changes: binutils (2.15-5ubuntu2.4) hoary-security; urgency=low . * SECURITY UPDATE: Arbitrary code execution when building a crafted source with gas. * Add debian/patches/502-messages-vsnprintf.dpatch: - Use vsnprintf() instead of vsprintf() to avoid overflow on overly long identifiers (and similar). - Patch backported from later stable release. * References: - http://bugs.gentoo.org/show_bug.cgi?id=99464 Files: dfaae7efb7f1d2e8e776184fd17767d4 434332 doc optional binutils-doc_2.15-5ubuntu2.4_all.deb 9cc06f28d94d285a33586e7086c453fd 1323958 devel standard binutils_2.15-5ubuntu2.4_i386.deb 8bd98d94b019bcf9f5179a9242501bd2 2795812 devel extra binutils-dev_2.15-5ubuntu2.4_i386.deb 04fbf5ef9336da5926fccd01ac5d6ddf 7868346 devel extra binutils-multiarch_2.15-5ubuntu2.4_i386.deb -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2.2 (GNU/Linux) iD8DBQFE4vmD0N0xjzyQZEIRAjnpAJ0V1WgjZzccd3OEc9KDWjbzWb3TawCeO32C ULjfMeJgzrrO8yE5cyilpnc= =hB93 -----END PGP SIGNATURE-----