[Pkg-dia-team] Bug#360566: dia: buffer overflows in xfig importer [CVE-2006-1550]

[Martin Pitt]

Package: dia
Version: 0.94.0-17.1
Severity: grave
Tags: security patch

Hi Roland,

recently, three buffer overflows were discovered in the xfig importer.
Please see 

  http://mail.gnome.org/archives/dia-list/2006-March/msg00149.html

for details and a patch.

This is CVE-2006-1550; please mention this number in the changelog to
ease tracking.

Thank you!

Martin
-- 
Martin Pitt        http://www.piware.de
Ubuntu Developer   http://www.ubuntu.com
Debian Developer   http://www.debian.org

In a world without walls and fences, who needs Windows and Gates?
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: Digital signature
Url : http://lists.alioth.debian.org/pipermail/pkg-dia-team/attachments/20060403/2c11ec3b/attachment.pgp