CVE-2013-0172

Debian Bug report logs - #699188
CVE-2013-0172

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2013-0172

Date: Mon, 28 Jan 2013 19:24:40 +0100

Package: samba4
Severity: grave
Tags: security

Hi,
as discussed on IRC last week. I'm filing a bug for proper tracking:
https://lists.samba.org/archive/samba-technical/2013-January/089911.html

Cheers,
        Moritz

Message #10 received at 699188-done@bugs.debian.org (full text, mbox, reply):

From: Steve Langasek <vorlon@debian.org>

To: 699188-done@bugs.debian.org

Cc: Brian May <brian@microcomaustralia.com.au>, Andrew Bartlett <abartlet@samba.org>

Subject: Re: CVE-2013-0172

Date: Mon, 11 Feb 2013 20:26:18 -0800

[Message part 1 (text/plain, inline)]

Version: 4.0.0~beta2+dfsg1-3.1

Fixed in NMU.  Brian, Andrew: can one of you please send the NMU diff to the
BTS (as per the Debian NMU policy), so that the exact patch used is
available where we can find it for reference if needed?

Thanks,
-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek@ubuntu.com                                     vorlon@debian.org

[signature.asc (application/pgp-signature, inline)]

Message #15 received at 699188@bugs.debian.org (full text, mbox, reply):

From: Brian May <brian@microcomaustralia.com.au>

To: Steve Langasek <vorlon@debian.org>

Cc: Andrew Bartlett <abartlet@samba.org>, 699188@bugs.debian.org

Subject: Re: CVE-2013-0172

Date: Tue, 12 Feb 2013 16:16:49 +1100

[Message part 1 (text/plain, inline)]

On 12 February 2013 15:26, Steve Langasek <vorlon@debian.org> wrote:

> Version: 4.0.0~beta2+dfsg1-3.1
>
> Fixed in NMU.  Brian, Andrew: can one of you please send the NMU diff to
> the
> BTS (as per the Debian NMU policy), so that the exact patch used is
> available where we can find it for reference if needed?
>

Attached the patch from debian/patches/CVE-2013-0172 - is this sufficient?
-- 
Brian May <brian@microcomaustralia.com.au>

[Message part 2 (text/html, inline)]

[CVE-2013-0172 (application/octet-stream, attachment)]

Message #20 received at 699188@bugs.debian.org (full text, mbox, reply):

From: Steve Langasek <vorlon@debian.org>

To: Brian May <brian@microcomaustralia.com.au>

Cc: Andrew Bartlett <abartlet@samba.org>, 699188@bugs.debian.org

Subject: Re: CVE-2013-0172

Date: Mon, 11 Feb 2013 21:21:19 -0800

[Message part 1 (text/plain, inline)]

On Tue, Feb 12, 2013 at 04:16:49PM +1100, Brian May wrote:
> On 12 February 2013 15:26, Steve Langasek <vorlon@debian.org> wrote:

> > Version: 4.0.0~beta2+dfsg1-3.1

> > Fixed in NMU.  Brian, Andrew: can one of you please send the NMU diff to
> > the
> > BTS (as per the Debian NMU policy), so that the exact patch used is
> > available where we can find it for reference if needed?

> Attached the patch from debian/patches/CVE-2013-0172 - is this sufficient?

Looks good to me, thanks.

-- 
Steve Langasek                   Give me a lever long enough and a Free OS
Debian Developer                   to set it on, and I can move the world.
Ubuntu Developer                                    http://www.debian.org/
slangasek@ubuntu.com                                     vorlon@debian.org

[signature.asc (application/pgp-signature, inline)]

Send a report that this bug log contains spam.