Security bugs are reported here via bugzilla

[Thomas Houssin <thomas.houssin AT gmail.com>]

Synopsis
========
gnumeric2 is vulnerable to a heap overflow, possibly leading to the
execution of arbitrary code.

Background
==========
Gnumeric is intended to be a drop in replacement for commercial
spreadsheets. We are not attempting to clone existing applications.
However, we offer a customizable feel that attempts to minimize the
costs of transition.

Description
===========
Gnumeric contains a private copy of libpcre which is subject to an
integer overflow (CAN-2005-2491): Integer overflow in pcre_compile.c in
Perl Compatible Regular Expressions (PCRE) before 6.2, as used in
multiple products, allows attackers to execute arbitrary code via
quantifier values in regular expressions, which leads to a heap-based
buffer overflow.

Affected packages
=================
gnumeric2 in all grimoires is affected. This is now fixed in devel,
test, stable-rc 0.2 and stable 0.1 grimoires.

Resolution
==========
All gnumeric2 users should upgrade to the latest available version:
         # scribe update
         # cast -c gnumeric2

References
==========
   [ 1 ] CAN-2005-2491
         http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-2491
   [ 2 ] GLSA 200509-02
         http://www.gentoo.org/security/en/glsa/glsa-200509-02.xml

-- 
Thomas Houssin

Security Team Leader Source Mage GNU/Linux (http://www.sourcemage.org)
Key fingerprint = 3CB8 3FC4 840D B272 E623  BCB8 54DB F4E3 4240 4C36
http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x42404C36

Attachment: signature.asc
Description: OpenPGP digital signature