Public bug reported:
A new release of inetutils is available for merging from Debian.
Ubuntu: 2:2.8-2ubuntu1
Debian Unstable: 2:2.8-4
### New Debian Changes ###
inetutils (2:2.8-4) unstable; urgency=high
* Fix telnetd to not use uninitialized sigaction structures when setting up
signals. This could cause crashes leading to a denial of service, or
potentially lead to code execution on architectures where the sa_restorer
member is used. Reported privately by Brian Mak <[email protected]>.
Patch taken from upstream. Fixes CVE-2026-95510. (Closes: #1149672)
-- Guillem Jover <[email protected]> Sat, 03 Oct 2026 14:23:48 +0200
inetutils (2:2.8-3) unstable; urgency=high
* Fix talkd to no longer overflow a buffer when writing an announcement for
a client whose IP address has a reverse DNS name longer than around 200
characters. Reported by Tristan Madani <[email protected]>.
Patch taken from upstream. Fixes CVE-2026-19720.
-- Guillem Jover <[email protected]> Sun, 26 Jul 2026 03:45:01 +0200
### Old Ubuntu Delta ###
inetutils (2:2.8-2ubuntu1) stonking; urgency=medium
* Merge with Debian unstable (LP: #2153307). Remaining changes:
- Do not test the inetutils-ping package (LP #2009814)
+ d/t/test-root-commands: disable ping tests.
+ d/t/control: remove inetutils-ping dependency.
-- Zineb Zaadoud <[email protected]> Tue, 16 Jun 2026
22:02:01 +0200
** Affects: inetutils (Ubuntu)
Importance: Wishlist
Status: New
** Tags: dcr-merge
** Changed in: inetutils (Ubuntu)
Importance: Undecided => Wishlist
** Changed in: inetutils (Ubuntu)
Milestone: None => ubuntu-26.11
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2171217
Title:
Merge inetutils 2:2.8-4 from Debian for tenacious cycle
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/inetutils/+bug/2171217/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
