Spin v6.5.1 was discovered to contain an out-of-bounds write in lex() at spinlex.c.
{ "ubuntu_priority": "medium" }