[(nowhere)] [BuHa-Security] Stack Based Buffer Overflow Vulnerability in Amaya 9.4 #2

[Jason L Tibbitts III]

This would seem to apply to Extras.  What should happen from here?
Bugzilla?

- J<

[Jesse Keating]

On Thu, 2006-04-13 at 14:24 -0500, Jason L Tibbitts III wrote:
> This would seem to apply to Extras.  What should happen from here?
> Bugzilla?

Yes, bugzilla it against amaya, noting the CVE in the summary.

[Jason L Tibbitts III]

> > > > > "JK" == Jesse Keating  writes:

JK> Yes, bugzilla it against amaya, noting the CVE in the summary.

Unfortunately there is no CVE that I can find. There is an existing
CVE for Amaya (CVE-2005-4728) which is not related to this problem and
which seems to be Debian-specific.

- J<

[Aurelien Bompard]

> JK> Yes, bugzilla it against amaya, noting the CVE in the summary.
>
> Unfortunately there is no CVE that I can find. There is an existing
> CVE for Amaya (CVE-2005-4728) which is not related to this problem and
> which seems to be Debian-specific.

Yes, a bugzilla is the best way to make sure it's fixed. In the meantime, I 
used to be the maintainer of Amaya, which I orphaned in september 2005, but 
I'll try to patch this vuln the best I can.

Aurélien