[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-11 Thread Marc Deslauriers
ACK on the lucid debdiff, with a minor edit to debian/changelog to list the correct name of the patch file. The package is building now and will be released today. Your debdiffs look fine to me, thanks for all your hard work! ** Changed in: pgbouncer (Ubuntu Lucid) Status: Confirmed = Fix

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-11 Thread Launchpad Bug Tracker
This bug was fixed in the package pgbouncer - 1.3.1-3ubuntu0.1 --- pgbouncer (1.3.1-3ubuntu0.1) lucid-security; urgency=low * SECURITY UPDATE: denial of service when too long db name is provided (LP: #1083414) - debian/patches/04-CVE-2012-4575.dpatch:

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-09 Thread Christian Kuersteiner
And the last patch for lucid. Since this is my first security bug fix let me know if I missed something or can improve anything. ** Patch added: lp1083414-lucid.debdiff https://bugs.launchpad.net/ubuntu/+source/pgbouncer/+bug/1083414/+attachment/3455964/+files/lp1083414-lucid.debdiff -- You

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-08 Thread Launchpad Bug Tracker
This bug was fixed in the package pgbouncer - 1.4.2-2ubuntu0.1 --- pgbouncer (1.4.2-2ubuntu0.1) precise-security; urgency=low * SECURITY UPDATE: denial of service when too long db name is provided (LP: #1083414) - debian/patches/2-CVE-2012-4575.patch:

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-08 Thread Launchpad Bug Tracker
This bug was fixed in the package pgbouncer - 1.4.2-1ubuntu0.1 --- pgbouncer (1.4.2-1ubuntu0.1) oneiric-security; urgency=low * SECURITY UPDATE: denial of service when too long db name is provided (LP: #1083414) - debian/patches/3-CVE-2012-4575.patch:

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-08 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/oneiric-security/pgbouncer ** Branch linked: lp:~ubuntu-branches/ubuntu/precise/pgbouncer/precise- security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1083414 Title:

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-07 Thread Marc Deslauriers
ACK on the oneiric and precise debdiffs. They look good. They will build now and will be pushed soon. Thanks! -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1083414 Title: DoS-Vulnerability in

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-07 Thread Marc Deslauriers
** Changed in: pgbouncer (Ubuntu Oneiric) Status: Confirmed = Fix Committed ** Changed in: pgbouncer (Ubuntu Precise) Status: Confirmed = Fix Committed -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-06 Thread Christian Kuersteiner
** Patch added: lp1083414-oneiric.debdiff https://bugs.launchpad.net/ubuntu/+source/pgbouncer/+bug/1083414/+attachment/3453631/+files/lp1083414-oneiric.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-05 Thread Marc Deslauriers
ACK on the debdiff, looks good, thanks! I will upload it for building now, and it should be released in the next few hours. Thanks! ** Also affects: pgbouncer (Ubuntu Quantal) Importance: Undecided Status: New ** Also affects: pgbouncer (Ubuntu Raring) Importance: Undecided

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-05 Thread Launchpad Bug Tracker
This bug was fixed in the package pgbouncer - 1.5.2-2ubuntu0.1 --- pgbouncer (1.5.2-2ubuntu0.1) quantal-security; urgency=low * SECURITY UPDATE: denial of service when too long db name is provided (LP: #1083414) - debian/patches/1-CVE-2012-4575.patch:

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-05 Thread Launchpad Bug Tracker
** Branch linked: lp:~ubuntu-branches/ubuntu/quantal/pgbouncer/quantal- security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1083414 Title: DoS-Vulnerability in pgbouncer To manage notifications

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-05 Thread Christian Kuersteiner
** Patch added: lp1083414-precise.debdiff https://bugs.launchpad.net/ubuntu/+source/pgbouncer/+bug/1083414/+attachment/3452777/+files/lp1083414-precise.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-03 Thread Christian Kuersteiner
** Patch added: lp1083414-quantal.debdiff https://bugs.launchpad.net/ubuntu/+source/pgbouncer/+bug/1083414/+attachment/3450319/+files/lp1083414-quantal.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu.

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-12-03 Thread Ubuntu Foundations Team Bug Bot
The attachment lp1083414-quantal.debdiff of this bug report has been identified as being a patch in the form of a debdiff. The ubuntu- sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. In the event that this is in fact not a patch you

[Bug 1083414] Re: DoS-Vulnerability in pgbouncer

2012-11-26 Thread Christian Kuersteiner
** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1083414 Title: DoS-Vulnerability in pgbouncer To manage notifications about this