[Bug 1971294] Re: Merge nbd from Debian unstable for kinetic
This bug was fixed in the package nbd - 1:3.24-1 --- nbd (1:3.24-1) unstable; urgency=medium * New upstream release. - CVE-2022-26495: Disallow name lenghts of (unsigned int)-1, by constraining the length to 4096 bytes - CVE-2022-26496: Fix buffer overflow in NBD_OPT_INFO/NBD_OPT_GO handling. - These security are tracked in the Debian BTS; Closes: #1006915. - nbd-server transaction logs can now optionally also log data - New binary: nbd-trplay, to replay (to an image) a transaction log. -- Wouter Verhelst Tue, 08 Mar 2022 10:02:56 +0200 ** Changed in: nbd (Ubuntu) Status: In Progress => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26495 ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2022-26496 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971294 Title: Merge nbd from Debian unstable for kinetic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nbd/+bug/1971294/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1971294] Re: Merge nbd from Debian unstable for kinetic
+1, please go ahead and sync it Athos. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971294 Title: Merge nbd from Debian unstable for kinetic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nbd/+bug/1971294/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
[Bug 1971294] Re: Merge nbd from Debian unstable for kinetic
The current delta contains two security fixes, which are included in the new Debian unstable version of the package, as stated in d/changelog and as verified in https://salsa.debian.org/wouter/nbd/-/commit/d88ff98b5f314fa52049e98ae56b2ec0b7f9c8b7#d8b58112d12c35316db0278cb2a2753729d77d53_2116_2180 Therefore, this can be a sync instead. ** Changed in: nbd (Ubuntu) Assignee: (unassigned) => Athos Ribeiro (athos-ribeiro) ** Changed in: nbd (Ubuntu) Status: New => In Progress -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1971294 Title: Merge nbd from Debian unstable for kinetic To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/nbd/+bug/1971294/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
