Re: [Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-06 Thread Alexander Sack
On Fri, Aug 03, 2007 at 07:01:40AM -, William Grant wrote:
 
 ** Attachment added: debdiff for feisty-security
http://launchpadlibrarian.net/8673105/feisty-cve-2007-2500.diff
 

So, do you need a sponsor for this? What is the status?

 - Alexander

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-06 Thread William Grant
The security update procedure generally involves attaching a debdiff and
waiting for (pitti|keescook) to upload it.

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-06 Thread Kees Cook
Patch looks good; building now.  I should have it published shortly.
Thanks for preparing this!  :)

** Changed in: gnash (Ubuntu Feisty)
   Status: In Progress = Fix Committed

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-06 Thread Kees Cook
** Changed in: gnash (Ubuntu Feisty)
   Status: Fix Committed = Fix Released

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-03 Thread William Grant
** Also affects: gnash (upstream)
   Importance: Undecided
   Status: New

** Bug watch added: Debian Bug tracker #423433
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=423433

** Also affects: gnash (Debian) via
   http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=423433
   Importance: Unknown
   Status: Unknown

** Changed in: gnash (upstream)
   Status: New = Fix Released

** Changed in: gnash (Ubuntu)
   Status: Invalid = Fix Released

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-03 Thread William Grant

** Attachment added: debdiff for feisty-security
   http://launchpadlibrarian.net/8673105/feisty-cve-2007-2500.diff

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs


[Bug 130091] Re: CVE-2007-2500: memory corruption vulnerability in gnash

2007-08-03 Thread Bug Watch Updater
** Changed in: gnash (Debian)
   Status: Unknown = Fix Released

-- 
CVE-2007-2500: memory corruption vulnerability in gnash
https://bugs.launchpad.net/bugs/130091
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs