From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.43) id 1Dxhzr-0007Kz-DV for garchives@archives.gentoo.org; Wed, 27 Jul 2005 09:14:39 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.4/8.13.4) with SMTP id j6R9DjPH010169; Wed, 27 Jul 2005 09:13:45 GMT Received: from smtp.gentoo.org (smtp.gentoo.org [134.68.220.30]) by robin.gentoo.org (8.13.4/8.13.4) with ESMTP id j6R9C86Y014948 for ; Wed, 27 Jul 2005 09:12:08 GMT Received: from dsl-084-060-004-239.arcor-ip.net ([84.60.4.239] helo=[192.168.1.33]) by smtp.gentoo.org with esmtpa (Exim 4.43) id 1Dxhxg-0000Yv-CO for gentoo-dev@lists.gentoo.org; Wed, 27 Jul 2005 09:12:24 +0000 Message-ID: <42E75275.5040200@gentoo.org> Date: Wed, 27 Jul 2005 11:23:01 +0200 From: Stefan Cornelius User-Agent: Mozilla Thunderbird 1.0.6 (X11/20050722) X-Accept-Language: en-us, en Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-dev@gentoo.org Reply-to: gentoo-dev@lists.gentoo.org MIME-Version: 1.0 To: gentoo-dev@lists.gentoo.org Subject: [gentoo-dev] app-text/pstotext in danger of becoming security masked Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-Archives-Salt: 5c6e3c07-fb88-45d8-a741-d727ff2da136 X-Archives-Hash: 43e357f593f111280618df8303ff350e app-text/pstotext has a serious remote vulnerability that allows to execute arbitrary commands on a vulnerable system. It appears to be unmaintained at the moment. If anyone out there is able to take this on and patch it (honestly, patch is small), that would be much appreciated, the bug number is 100245. Otherwise, it's our intent to security mask the package in the next 24 hours. Thanks in advance, Stefan -- gentoo-dev@gentoo.org mailing list