Merge xemacs21 21.4.22-3.1 (universe) from Debian unstable (main)

Bug #611931 reported by Artur Rona on 2010-07-31
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
xemacs21 (Ubuntu)
Undecided
Unassigned

Bug Description

Binary package hint: xemacs21

xemacs21 (21.4.22-3.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix race conditions in lib-src/movemail.c which may be exploited by
    other users in the mail group to read/delete/modify mailboxes.
    Ported patch from Dan Rosenberg to xemacs21
    (11_CVE-2010-0825.dpatch; Closes: #590303).

 -- Nico Golde <email address hidden> Tue, 27 Jul 2010 14:27:11 +0200

Related branches

CVE References

Artur Rona (ari-tczew) wrote :
Artur Rona (ari-tczew) wrote :
Changed in xemacs21 (Ubuntu):
status: New → Confirmed
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package xemacs21 - 21.4.22-3.1ubuntu1

---------------
xemacs21 (21.4.22-3.1ubuntu1) maverick; urgency=low

  * Merge from debian unstable. (LP: #611931) Remaining changes:
    - debian/patches/21_fix_maximation_bug.dpatch:
      + Fix maximation issue, where xemacs21 meant to stay in an infinite loop
  * debian/README.source: Fix lintian's warning patch-system-but-no-source-readme.

xemacs21 (21.4.22-3.1) unstable; urgency=high

  * Non-maintainer upload by the Security Team.
  * Fix race conditions in lib-src/movemail.c which may be exploited by
    other users in the mail group to read/delete/modify mailboxes.
    Ported patch from Dan Rosenberg to xemacs21
    (11_CVE-2010-0825.dpatch; Closes: #590303).
 -- Artur Rona <email address hidden> Sat, 31 Jul 2010 03:51:25 +0200

Changed in xemacs21 (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers