typespeed -- format string

ID DSA-684
Type debian
Reporter Debian
Modified 2005-02-16T00:00:00


Ulf Härnhammar from the Debian Security Audit Project discovered a problem in typespeed, a touch-typist trainer disguised as game. This could lead to a local attacker executing arbitrary code as group games.

For the stable distribution (woody) this problem has been fixed in version 0.4.1-2.3.

For the unstable distribution (sid) this problem will be fixed soon.

We recommend that you upgrade your typespeed package.