Sync cracklib2 2.9.2-3 (main) from Debian unstable (main)
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| cracklib2 (Debian) |
Fix Released
|
Unknown
|
|||
| cracklib2 (Ubuntu) |
Fix Released
|
Wishlist
|
Unassigned | ||
| Xenial |
New
|
Undecided
|
Unassigned | ||
Bug Description
Please sync cracklib2 2.9.2-3 (main) from Debian unstable (main)
Changelog entries since current yakkety version 2.9.2-1build2:
cracklib2 (2.9.2-3) unstable; urgency=medium
* Fix "Buffer overflow processing long words" by applying patch from
https:/
0004-
* remove obsolete debian/pycompat
* change Vcs-* fields to https variants
* Bump Standards-Version to 3.9.8 (no changes)
* Fix "FTCBFS: invokes host-arch executable cracklib-packer" by applying
Helmut Grohne's patch to fix cross compilation (Closes: #792860)
-- Jan Dittberner <email address hidden> Thu, 25 Aug 2016 17:29:17 +0200
cracklib2 (2.9.2-2) unstable; urgency=medium
* Fix "CVE-2016-6318: Stack-based buffer overflow when parsing large
GECOS field" by applying patch by Salvatore Bonaccorso (Closes: #834502)
-- Jan Dittberner <email address hidden> Tue, 23 Aug 2016 18:50:44 +0200
CVE References
| Changed in cracklib2 (Ubuntu): | |
| importance: | Undecided → Wishlist |
| information type: | Public → Public Security |
| Changed in cracklib2 (Debian): | |
| status: | Unknown → Fix Released |
| Martin Pitt (pitti) wrote | #1 |
| Changed in cracklib2 (Ubuntu): | |
| status: | New → Fix Released |
This bug was fixed in the package cracklib2 - 2.9.2-3
Sponsored for Jeremy Bicha (jbicha)
---------------
cracklib2 (2.9.2-3) unstable; urgency=medium
* Fix "Buffer overflow processing long words" by applying patch from
https:/
0004-
* remove obsolete debian/pycompat
* change Vcs-* fields to https variants
* Bump Standards-Version to 3.9.8 (no changes)
* Fix "FTCBFS: invokes host-arch executable cracklib-packer" by applying
Helmut Grohne's patch to fix cross compilation (Closes: #792860)
-- Jan Dittberner <email address hidden> Thu, 25 Aug 2016 17:29:17 +0200
cracklib2 (2.9.2-2) unstable; urgency=medium
* Fix "CVE-2016-6318: Stack-based buffer overflow when parsing large
GECOS field" by applying patch by Salvatore Bonaccorso (Closes: #834502)
-- Jan Dittberner <email address hidden> Tue, 23 Aug 2016 18:50:44 +0200