Remotely exploitable buffer overflow in getterminaltype function

[Björn Torkelsson]

As reported in Debian bug #315065 there is a remotely explotiable buffer overflow in getterminaltype.

See also http://www.pdc.kth.se/heimdal/advisory/2005-06-20/

It may also be worth taking a look at Debian bug #305574 or CAN-2005-0469.

As reported in Debian bug #315065 there is a remotely explotiable buffer overflow in getterminaltype.

See also http://www.pdc.kth.se/heimdal/advisory/2005-06-20/

It may also be worth taking a look at Debian bug #305574 or CAN-2005-0469.

[Björn Torkelsson (torkel)]

Patch for CAN-2005-0469, stolen from the Debian packege 0.6.3-10sarge1.

[Björn Torkelsson (torkel)]

Patch for CAN-2005-2040, stolen from Debian 0.6.3-10sarge1.

[Martin Pitt (pitti)]

> This bug is fixed for breezy, but the question remains open for hoary : are there security uploads for universe ?

Yes, the community is welcome to fix universe security bugs. Please see

 https://wiki.ubuntu.com/SecurityUpdateProcedures

for the details.

[Björn Torkelsson (torkel)]

I finally found some time to do a debdiff for fixing CAN-2005-0469 and CAN-2005-2040. Please review it!

[Martin Pitt (pitti)]

Thanks for preparing the patch, I reviewed and uploaded it. I also fixed Warty while I was at it.

[Automated Backports Builder (john-dong+backport-builder)]

This is a notification that the automatic backport of listen from gutsy to feisty has started.

You will be notified again once the build is finished.

For additional info and build logs, please see: http://sharkattack.media.mit.edu/inventory/check_builds/101

Thanks,

The Backports Builder

[Automated Backports Builder (john-dong+backport-builder)]

Howdy! This message is to inform you that the build you requested of listen from gutsy to feisty has been completed.
Its status is: FAIL
For further information, build logs, and testing .deb packages, please see: http://sharkattack.media.mit.edu/inventory/check_builds/101

Thanks,
The Backports Builder

[Björn Torkelsson (torkel)]

What?

Something seems to be broken.

[Matti Lindell (mlind)]

the buildd failed to fetch some packages (http status was 404). Someone should trigger a rebuild.

[Björn Torkelsson (torkel)]

Yeah, but why this bug. It has absolutely nothing todo with listen and it was fixed and closed almost two years ago.

[Automated Backports Builder (john-dong+backport-builder)]

This is a notification that the automatic backport of listen from gutsy to feisty has started.

You will be notified again once the build is finished.

For additional info and build logs, please see: http://sharkattack.media.mit.edu/inventory/check_builds/101

Thanks,

The Backports Builder

[Automated Backports Builder (john-dong+backport-builder)]

Howdy! This message is to inform you that the build you requested of listen from gutsy to feisty has been completed.
Its status is: FAIL
For further information, build logs, and testing .deb packages, please see: http://sharkattack.media.mit.edu/inventory/check_builds/101

Thanks,
The Backports Builder