*** This bug is a security vulnerability ***

Public security bug reported:

## FFE ##

[Rationale]

* Upstream micro-releases 5.1.2 and 5.1.3 fix multiple serious security
issues. See the developers' summary at
https://sabnzbd.org/wiki/extra/5.1-vulnerabilities.html

[ Scope ]

* Security fixes and related changes to the upstream testsuite only. The
sabnzbdplus package has no reverse dependencies.

* $ seeded-in-ubuntu sabnzbdplus
  sabnzbdplus's binaries are not seeded.

* Diff of the upstream changelog since the version included in the
archive is attached in changelog.diff.

[ Regression Potential ]

* Low. Targeted upstream changes only, no significant packaging changes.
Version 5.1.3 has been packaged in Debian for over two weeks, as well as
on my PPA (ppa:jcfp/ppa resp. ppa:jcfp/nobetas) which is advertised
upstream, with no issues reported. There are no API changes and no
changes in the package's dependencies. The sabnzbdplus package has no
reverse dependencies.

[ Testing ]

* Smoke test:
  - PPA: 
https://launchpad.net/~jcfp/+archive/ubuntu/private/+sourcepub/18806883/+listing-archive-extra
  - Build: 
https://launchpad.net/~jcfp/+archive/ubuntu/private/+build/33802500/+files/buildlog_ubuntu-stonking-amd64.sabnzbdplus_5.1.3+dfsg-1ubuntu1_BUILDING.txt.gz
  - Installation: https://paste.debian.net/hidden/97c894c3
  - Upgrade: https://paste.debian.net/hidden/94ca2b86
  - Autopkgtest: 
https://ci.debian.net/data/autopkgtest/testing/amd64/s/sabnzbdplus/76162808/log.gz
  - Does it break other packages: nope

** Affects: sabnzbdplus (Ubuntu)
     Importance: Undecided
         Status: New

** Attachment added: "changelog.diff"
   
https://bugs.launchpad.net/bugs/2169008/+attachment/6003841/+files/changelog.diff

** Information type changed from Private Security to Public Security

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2169008

Title:
  FFe: sync 5.1.3+dfsg-1 (multiverse) from Debian unstable (contrib)

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/sabnzbdplus/+bug/2169008/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to