The vulnerable code still appears to be in the package. ** This bug has been flagged as a security issue ** Changed in: openmotif (Ubuntu) Status: Unconfirmed => Confirmed -- CVE-2005-3964: Two exploitable buffer overflows in openmotif https://launchpad.net/bugs/29398