several vulnerabilities
Bug #227246 reported by
disabled.user
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| python2.4 (Ubuntu) |
Fix Released
|
Medium
|
Kees Cook | ||
| Dapper |
Fix Released
|
Medium
|
Kees Cook | ||
| Feisty |
Fix Released
|
Medium
|
Kees Cook | ||
| Gutsy |
Fix Released
|
Medium
|
Kees Cook | ||
| Hardy |
Fix Released
|
Medium
|
Kees Cook | ||
| python2.5 (Ubuntu) |
Fix Released
|
Medium
|
Kees Cook | ||
| Dapper |
Fix Released
|
Medium
|
Kees Cook | ||
| Feisty |
Fix Released
|
Medium
|
Kees Cook | ||
| Gutsy |
Fix Released
|
Medium
|
Kees Cook | ||
| Hardy |
Fix Released
|
Medium
|
Kees Cook | ||
Bug Description
Binary package hint: python2.4
References:
DSA 1551-1 (http://
DSA 1551-1 covers CVE-2007-2052, CVE-2007-4965, CVE-2008-1679, CVE-2008-1721 and CVE-2008-1887.
According to changelogs, the following supported stable releases have some of those CVEs fixed:
- Dapper: CVE-2007-4965 and CVE-2007-2052
- Feisty: CVE-2007-4965
- Gutsy: CVE-2007-4965
- Hardy: CVE-2007-4965, CVE-2008-1679 and CVE-2008-1721
Okay, I'm confused. Could somebody please try to find out which release misses what patch for any of those CVEs?
Revision history for this message
| Jamie Strandboge (jdstrand) wrote | #1 |
| Changed in python2.4: | |
| status: | New → Confirmed |
| status: | New → Confirmed |
| status: | New → Confirmed |
| status: | New → Confirmed |
Revision history for this message
| Matthias Klose (doko) wrote | #2 |
| Changed in python2.4: | |
| status: | New → Fix Released |
| status: | Confirmed → Fix Released |
Revision history for this message
| Kees Cook (kees) wrote | #3 |
| Changed in python2.4: | |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | Confirmed → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | Confirmed → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | Confirmed → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| Changed in python2.5: | |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
| status: | New → Fix Released |
| Changed in python2.4: | |
| assignee: | nobody → kees |
| importance: | Undecided → Medium |
To post a comment you must log in.
http://
This leaves CVE-2008-1679 for Dapper-Gutsy, and CVE-2008-1721 and CVE-2008-1887 for Dapper-Intrepid.