Activity log for bug #97603

Date Who What changed Old value New value Message
2007-03-28 22:15:45 Andrew bug added bug
2007-03-29 14:10:24 Andrew description Binary package hint: cgiirc Looks like the latest version of cgiirc for dapper is: 0.5.4-6sarge1 which is vulnerable to a buffer overflow according to the developer and described here: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-2148 Feisty seems to have the latest and greatest version which has the vulnerability fixed. Binary package hint: cgiirc Looks like the latest version of cgiirc for dapper is: 0.5.4-6sarge1 which is vulnerable to a buffer overflow according to the developer and described in the CVE. Feisty seems to have the latest and greatest version which has the vulnerability fixed.
2007-03-29 15:49:16 Andrew bug added attachment 'cgiirc_0.5.9-2.debdiff' (debdiff for dapper)
2007-04-06 22:25:10 Lionel Porcheron bug added subscriber Ubuntu Backporters
2007-04-29 04:24:05 William Grant bug added subscriber MOTU SWAT Team
2007-04-29 04:25:33 William Grant bug assigned to cgiirc (Debian)
2007-04-29 04:41:20 William Grant cgiirc: status Unconfirmed Fix Released
2007-04-29 04:41:20 William Grant cgiirc: statusexplanation This only affects Dapper.
2007-04-29 04:44:12 William Grant title CGIIRC 0.5.9-2 backport request to dapper (0.5.4-6sarge) from feisty CGIIRC in Dapper has a couple of unfixed buffer overflows
2007-04-29 04:45:58 William Grant cgiirc: status Unconfirmed Confirmed
2007-04-29 04:45:58 William Grant cgiirc: statusexplanation
2007-04-29 06:49:35 Bug Watch Updater cgiirc: status Unknown Fix Released
2008-04-09 20:16:55 Kees Cook bug added subscriber Ubuntu Security Team
2010-06-24 23:23:52 Steve Beattie tags patch
2011-10-14 20:28:23 Jamie Strandboge cgiirc (Ubuntu Dapper): status Confirmed Won't Fix