3 ms·

Not sure on the current Debian policy but this bug could certainly be framed as a potential security issue; exploiting the bug could result in resource exhausti

Not sure on the current Debian policy but this bug could certainly be framed as a potential security issue; exploiting the bug could result in resource exhaustion and denial of service.

ensiferum 9y ago
Exploited by who? The programmers ?
- tacostakohashi 9y ago
  The users. Anybody who can connect to a server implemented in C++ can compiled by a gcc with this problem.
  - matheweis 9y ago
    I think it's not quite that severe; anybody who can connect to a server implemented in C++ that is compiled with gcc and initializes objects in the way described here could exploit the bug.
    - mbrubeck 9y ago
      And the initialization needs to conditionally throw an exception based on user input.
xorblurb 9y ago
For released distro, I doubt Debian will rebuild all their packages and upload them all on security.debian.org...