CVE-2012-4024 CVE-2012-4025

Debian Bug report logs - #683371
CVE-2012-4024 CVE-2012-4025

Toggle useless messages

Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <muehlenhoff@univention.de>

To: Debian Bug Tracking System <submit@bugs.debian.org>

Subject: CVE-2012-4024 CVE-2012-4025

Date: Tue, 31 Jul 2012 10:11:55 +0200

Package: squashfs-tools
Severity: grave
Tags: security

Please see here for CVE-2012-402[45] :
http://sourceforge.net/mailarchive/forum.php?thread_name=CAAoG81HL9oP8roPLLhftTSXTzSD%2BZcR66PRkVU%3Df76W3Mjde_w%40mail.gmail.com&forum_name=squashfs-devel

Cheers,
        Moritz

Message #12 received at 683371@bugs.debian.org (full text, mbox, reply):

From: Daniel Baumann <daniel.baumann@progress-technologies.net>

To: 683371@bugs.debian.org

Subject: Re: CVE-2012-4024 CVE-2012-4025

Date: Tue, 14 Aug 2012 20:14:16 +0200

severity 683371 normal
thanks

according to upstrean and the description of the actual bugs, this 
doesn't warrant serious severity.

-- 
Address:        Daniel Baumann, Donnerbuehlweg 3, CH-3012 Bern
Email:          daniel.baumann@progress-technologies.net
Internet:       http://people.progress-technologies.net/~daniel.baumann/

Message #17 received at 683371-done@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>

To: Daniel Baumann <daniel.baumann@progress-technologies.net>

Cc: 683371-done@bugs.debian.org

Subject: Re: CVE-2012-4024 CVE-2012-4025

Date: Thu, 28 Feb 2013 21:19:26 +0100

Version: 1:4.2+20121212-1

On Tue, Aug 14, 2012 at 08:14:16PM +0200, Daniel Baumann wrote:
> severity 683371 normal
> thanks
>
> according to upstrean and the description of the actual bugs, this  
> doesn't warrant serious severity.

Fixed in the snapshot currently in unstable.

Cheers,
        Moritz

Message #22 received at 683371@bugs.debian.org (full text, mbox, reply):

From: Jonathan Wiltshire <jmw@debian.org>

To: 683371@bugs.debian.org

Subject: Re: CVE-2012-4024 CVE-2012-4025

Date: Fri, 01 Mar 2013 12:15:02 -0000

Package: squashfs-tools

Dear maintainer,

Recently you fixed one or more security problems and as a result you closed
this bug. These problems were not serious enough for a Debian Security
Advisory, so they are now on my radar for fixing in the following suites
through point releases:

squeeze (6.0.7) - use target "stable"

Please prepare a minimal-changes upload targetting each of these suites,
and submit a debdiff to the Release Team [0] for consideration. They will
offer additional guidance or instruct you to upload your package.

I will happily assist you at any stage if the patch is straightforward and
you need help. Please keep me in CC at all times so I can
track [1] the progress of this request.

For details of this process and the rationale, please see the original
announcement [2] and my blog post [3].

0: debian-release@lists.debian.org
1: http://prsc.debian.net/tracker/683371/
2: <201101232332.11736.thijs@debian.org>
3: http://deb.li/prsc

Thanks,

with his security hat on:
--
Jonathan Wiltshire                                      jmw@debian.org
Debian Developer                         http://people.debian.org/~jmw

4096R: 0xD3524C51 / 0A55 B7C5 1223 3942 86EC  74C3 5394 479D D352 4C51

Send a report that this bug log contains spam.