DSA-1980-1 fix not in lucid, or karmic

[Matt Arnold]

Binary package hint: ircd-hybrid

The fix for DSA-1980-1 which references CVE-2009-4016 and CVE-2010-0300. is not in lucid or karmic. It should be an upstream Debian bug has been outstanding since 27 Jan (#567192), and we already have our own patches applied so these changes should be merged into our version as soon as possible

[Matt Arnold (mattarnold5)]

Here is a patch merging the change from lenny

[Kees Cook (kees)]

ACK, thanks for the debdiff. I rolled an update for karmic as well (adjusted the version in the changelog). It is building now and should publish shortly.

[Launchpad Janitor (janitor)]

This bug was fixed in the package ircd-hybrid - 1:7.2.2.dfsg.2-6ubuntu3

---------------
ircd-hybrid (1:7.2.2.dfsg.2-6ubuntu3) lucid; urgency=low

  * SECURITY UPDATE: integer underflow causes local DoS (LP: #518226)
    - debian/patches/03_cve-20094016.patch based on upstream patch
    - CVE 2009-4016
 -- Matt Arnold <email address hidden> Sat, 06 Feb 2010 23:41:07 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package ircd-hybrid - 1:7.2.2.dfsg.2-6ubuntu2.0.9.10.1

---------------
ircd-hybrid (1:7.2.2.dfsg.2-6ubuntu2.0.9.10.1) karmic-security; urgency=low

  * SECURITY UPDATE: integer underflow causes local DoS (LP: #518226)
    - debian/patches/03_cve-20094016.patch based on upstream patch
    - CVE 2009-4016
 -- Matt Arnold <email address hidden> Sat, 06 Feb 2010 23:41:07 -0500

[Launchpad Janitor (janitor)]

This bug was fixed in the package ircd-hybrid - 1:7.2.2.dfsg.2-6ubuntu1.1

---------------
ircd-hybrid (1:7.2.2.dfsg.2-6ubuntu1.1) jaunty-security; urgency=low

  * SECURITY UPDATE: integer underflow causes local DoS (LP: #518226)
    - debian/patches/03_cve-20094016.patch: patch thanks to Matt Arnold
    - CVE 2009-4016
 -- Jamie Strandboge <email address hidden> Mon, 08 Feb 2010 16:04:39 -0600