CVE-2015-2058

Related Vulnerabilities: CVE-2015-2058  

Debian Bug report logs - #779154
CVE-2015-2058

version graph

Reported by: Moritz Muehlenhoff <jmm@debian.org>

Date: Tue, 24 Feb 2015 22:09:01 UTC

Severity: grave

Tags: security

Found in version jabberd2/2.2.17+dfsg1-2

Fixed in version jabberd2/2.3.3-1

Done: Salvatore Bonaccorso <carnil@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org>:
Bug#779154; Package jabberd2. (Tue, 24 Feb 2015 22:09:06 GMT) (full text, mbox, link).


Acknowledgement sent to Moritz Muehlenhoff <jmm@debian.org>:
New Bug report received and forwarded. Copy sent to team@security.debian.org, secure-testing-team@lists.alioth.debian.org, Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org>. (Tue, 24 Feb 2015 22:09:06 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@debian.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: CVE-2015-2058
Date: Tue, 24 Feb 2015 23:07:46 +0100
Package: jabberd2
Severity: grave
Tags: security

This has been assigned CVE-2015-2058:
https://github.com/jabberd2/jabberd2/issues/85

Cheers,
        Moritz



Information forwarded to debian-bugs-dist@lists.debian.org, Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org>:
Bug#779154; Package jabberd2. (Wed, 22 Apr 2015 07:33:04 GMT) (full text, mbox, link).


Acknowledgement sent to Simon Josefsson <simon@josefsson.org>:
Extra info received and forwarded to list. Copy sent to Debian XMPP Maintainers <pkg-xmpp-devel@lists.alioth.debian.org>. (Wed, 22 Apr 2015 07:33:04 GMT) (full text, mbox, link).


Message #10 received at 779154@bugs.debian.org (full text, mbox, reply):

From: Simon Josefsson <simon@josefsson.org>
To: 779154@bugs.debian.org
Subject: Re: CVE-2015-2058
Date: Wed, 22 Apr 2015 09:29:38 +0200
[Message part 1 (text/plain, inline)]
Willem and I are in the process of packaging/uploading the 2.3.3 release
which should take care of this.

/Simon
[signature.asc (application/pgp-signature, inline)]

Reply sent to Simon Josefsson <simon@josefsson.org>:
You have taken responsibility. (Wed, 22 Apr 2015 19:36:06 GMT) (full text, mbox, link).


Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Wed, 22 Apr 2015 19:36:06 GMT) (full text, mbox, link).


Message #15 received at 779154-done@bugs.debian.org (full text, mbox, reply):

From: Simon Josefsson <simon@josefsson.org>
To: 779154-done@bugs.debian.org
Subject: Re: CVE-2015-2058
Date: Wed, 22 Apr 2015 21:33:15 +0200
[Message part 1 (text/plain, inline)]
Should be fixed with the new 2.3.3 upstream upload, alas we forgot to
put a Closes changelog entry in it.

/Simon
[Message part 2 (application/pgp-signature, inline)]

Marked as found in versions jabberd2/2.2.17+dfsg1-2 and reopened. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 22 Apr 2015 19:42:04 GMT) (full text, mbox, link).


Marked as fixed in versions jabberd2/2.3.3-1. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 22 Apr 2015 19:42:05 GMT) (full text, mbox, link).


Marked Bug as done Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Sun, 25 Sep 2016 16:54:06 GMT) (full text, mbox, link).


Notification sent to Moritz Muehlenhoff <jmm@debian.org>:
Bug acknowledged by developer. (Sun, 25 Sep 2016 16:54:07 GMT) (full text, mbox, link).


Message sent on to Moritz Muehlenhoff <jmm@debian.org>:
Bug#779154. (Sun, 25 Sep 2016 16:54:08 GMT) (full text, mbox, link).


Message #26 received at 779154-submitter@bugs.debian.org (full text, mbox, reply):

From: Salvatore Bonaccorso <carnil@debian.org>
To: control@bugs.debian.org
Cc: 779154-submitter@bugs.debian.org
Subject: closing 779154
Date: Sun, 25 Sep 2016 18:51:39 +0200
close 779154 2.3.3-1
thanks




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Mon, 24 Oct 2016 07:28:37 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 13:25:00 2019; Machine Name: beach

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.