| 2008-09-06 09:19:15 |
Stefan Lesicnik |
bug |
|
|
added bug |
| 2008-09-06 09:20:33 |
Stefan Lesicnik |
bug |
|
|
assigned to wordnet (Debian) |
| 2008-09-06 09:22:28 |
Stefan Lesicnik |
wordnet: status |
New |
In Progress |
|
| 2008-09-06 09:22:28 |
Stefan Lesicnik |
wordnet: assignee |
|
stefanlsd |
|
| 2008-09-06 09:22:28 |
Stefan Lesicnik |
wordnet: statusexplanation |
|
This bug was closed in Debian, but the changelog states they only addressed minor components of this bug.
http://www.ocert.org/advisories/ocert-2008-014.html
shows the release of a more comprehensive patch.
http://www.ocert.org/analysis/2008-014/wordnet.patch
|
|
| 2008-09-06 09:28:14 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-intrepid' (debdiff-intrepid) |
| 2008-09-06 12:53:46 |
Bug Watch Updater |
wordnet: status |
Unknown |
Fix Released |
|
| 2008-09-08 13:29:42 |
Jamie Strandboge |
who_made_private |
stefanlsd |
|
|
| 2008-09-08 13:29:48 |
Jamie Strandboge |
bug |
|
|
added subscriber Ubuntu Bugs |
| 2008-09-11 08:53:07 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-intrepid' (debdiff-intrepid) |
| 2008-09-11 09:02:49 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-intrepid' (debdiff-intrepid) |
| 2008-09-11 10:22:44 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-hardy' (debdiff-hardy) |
| 2008-09-11 10:24:03 |
Stefan Lesicnik |
wordnet: status |
New |
In Progress |
|
| 2008-09-11 10:24:03 |
Stefan Lesicnik |
wordnet: statusexplanation |
|
|
|
| 2008-09-11 10:31:56 |
Stefan Lesicnik |
wordnet: assignee |
stefanlsd |
|
|
| 2008-09-11 10:31:56 |
Stefan Lesicnik |
wordnet: statusexplanation |
|
|
|
| 2008-09-11 12:43:56 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-gutsy' (debdiff-gutsy) |
| 2008-09-11 12:44:29 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-feisty' (debdiff-feisty) |
| 2008-09-23 10:55:42 |
Jamie Strandboge |
wordnet: status |
New |
In Progress |
|
| 2008-09-23 10:55:42 |
Jamie Strandboge |
wordnet: statusexplanation |
|
|
|
| 2008-09-23 10:55:57 |
Jamie Strandboge |
wordnet: status |
New |
In Progress |
|
| 2008-09-23 10:55:57 |
Jamie Strandboge |
wordnet: statusexplanation |
|
|
|
| 2008-09-27 11:22:51 |
Stefan Lesicnik |
bug |
|
|
added attachment 'debdiff-feisty' (debdiff-feisty) |
| 2008-09-29 20:24:38 |
Jamie Strandboge |
wordnet: status |
In Progress |
Fix Committed |
|
| 2008-09-29 20:24:53 |
Jamie Strandboge |
wordnet: status |
In Progress |
Fix Committed |
|
| 2008-09-29 20:25:04 |
Jamie Strandboge |
wordnet: status |
In Progress |
Fix Committed |
|
| 2008-09-29 20:26:07 |
Jamie Strandboge |
wordnet: status |
In Progress |
Fix Committed |
|
| 2008-09-29 20:28:11 |
Jamie Strandboge |
wordnet: status |
Fix Committed |
Triaged |
|
| 2008-09-29 20:28:11 |
Jamie Strandboge |
wordnet: statusexplanation |
|
Excellent work! The feisty debdiff did not use 'feisty-security', but beyond that everything looked great. I have uploaded feisty, hardy and intrepid. I have marked gutsy as 'Triaged', but please put back as 'In Progress' when the SRU process is taken care of.
Thanks for your thorough work! |
|
| 2008-09-29 21:32:41 |
Launchpad Janitor |
wordnet: status |
Fix Committed |
Fix Released |
|
| 2008-09-30 20:34:28 |
Jamie Strandboge |
wordnet: status |
Fix Committed |
Fix Released |
|
| 2008-09-30 20:34:28 |
Jamie Strandboge |
wordnet: statusexplanation |
|
wordnet (1:3.0-6ubuntu0.1) hardy-security; urgency=low
* SECURITY UPDATE: Stack overflows fed via the command line, environment
variables or WordNet library calls can result in arbitrary code
execution. (Closes LP: #257067)
* 50_CVE-2008-2149_buffer_overflows.dpatch:
- buffer overflow patch ( tille@debian.org (tille: 0) ).
* 51_overflows.dpatch:
- ocert patch to address additional potential security exploits.
* 51_overflows_memcpy.dpatch:
- Fix part of oCERT patch that breaks 'wordnet test -synsn'.
* References
http://www.ocert.org/advisories/ocert-2008-014.html
CVE-2008-2149
|
|
| 2008-09-30 20:34:43 |
Jamie Strandboge |
wordnet: status |
Fix Committed |
Fix Released |
|
| 2009-05-07 13:35:35 |
Sergio Zanchetta |
wordnet (Ubuntu Gutsy): status |
Triaged |
Won't Fix |
|
| 2009-08-16 05:16:13 |
Launchpad Janitor |
branch linked |
|
lp:ubuntu/karmic/wordnet |
|
