e17: CVE-2014-1845 CVE-2014-1846

Related Vulnerabilities: CVE-2014-1845   CVE-2014-1846  

Debian Bug report logs - #737705
e17: CVE-2014-1845 CVE-2014-1846

version graph

Reported by: Moritz Muehlenhoff <jmm@inutil.org>

Date: Wed, 5 Feb 2014 07:30:02 UTC

Severity: important

Tags: security

Fixed in version e17/0.17.3-3

Done: Albin Tonnerre <lutin@debian.org>

Bug is archived. No further changes may be made.

Toggle useless messages

View this report as an mbox folder, status mbox, maintainer mbox


Report forwarded to debian-bugs-dist@lists.debian.org, Debian Pkg-e Team <pkg-e-devel@lists.alioth.debian.org>:
Bug#737705; Package e17. (Wed, 05 Feb 2014 07:30:06 GMT) (full text, mbox, link).


Acknowledgement sent to Moritz Muehlenhoff <jmm@inutil.org>:
New Bug report received and forwarded. Copy sent to Debian Pkg-e Team <pkg-e-devel@lists.alioth.debian.org>. (Wed, 05 Feb 2014 07:30:07 GMT) (full text, mbox, link).


Message #5 received at submit@bugs.debian.org (full text, mbox, reply):

From: Moritz Muehlenhoff <jmm@inutil.org>
To: Debian Bug Tracking System <submit@bugs.debian.org>
Subject: e17: CVE-2014-1845 CVE-2014-1846
Date: Wed, 05 Feb 2014 08:17:24 +0100
Package: e17
Severity: important

Please see https://bugzilla.redhat.com/show_bug.cgi?id=1059410 :
https://git.enlightenment.org/core/enlightenment.git/commit/?id=9456e88504cb5daddbac3f49373a3a9a8577e27a
https://git.enlightenment.org/core/enlightenment.git/commit/?id=666df815cd86a50343859bce36c5cf968c5f38b0
https://git.enlightenment.org/core/enlightenment.git/commit/?id=bb4a21e98656fe2c7d98ba2163e6defe9a630e2b

Cheers,
        Moritz



Added tag(s) security. Request was from Salvatore Bonaccorso <carnil@debian.org> to control@bugs.debian.org. (Wed, 05 Feb 2014 11:39:05 GMT) (full text, mbox, link).


Reply sent to Albin Tonnerre <lutin@debian.org>:
You have taken responsibility. (Sun, 09 Feb 2014 16:36:10 GMT) (full text, mbox, link).


Notification sent to Moritz Muehlenhoff <jmm@inutil.org>:
Bug acknowledged by developer. (Sun, 09 Feb 2014 16:36:10 GMT) (full text, mbox, link).


Message #12 received at 737705-close@bugs.debian.org (full text, mbox, reply):

From: Albin Tonnerre <lutin@debian.org>
To: 737705-close@bugs.debian.org
Subject: Bug#737705: fixed in e17 0.17.3-3
Date: Sun, 09 Feb 2014 16:33:39 +0000
Source: e17
Source-Version: 0.17.3-3

We believe that the bug you reported is fixed in the latest version of
e17, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 737705@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Albin Tonnerre <lutin@debian.org> (supplier of updated e17 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 1.8
Date: Sun, 09 Feb 2014 16:35:48 +0100
Source: e17
Binary: e17 e17-data e17-dev e17-dbg
Architecture: source amd64 all
Version: 0.17.3-3
Distribution: unstable
Urgency: medium
Maintainer: Debian Pkg-e Team <pkg-e-devel@lists.alioth.debian.org>
Changed-By: Albin Tonnerre <lutin@debian.org>
Description: 
 e17        - Enlightenment DR17 Window Manager
 e17-data   - Enlightenment Window Manager Run Time Data Files
 e17-dbg    - Enlightenment DR17 Window Manager - debugging symbols
 e17-dev    - Enlightenment headers, static libraries and documentation
Closes: 737705 738272
Changes: 
 e17 (0.17.3-3) unstable; urgency=medium
 .
   * debian: switch to a .manpages file to install manpages instead of using CDBS
   * debian: switch from CDBS to dh
   * debian: use dh-autoreconf to get recent autotools version (Closes: #738272)
   * debian/rules: make sure we build using the hardening flags
   * patches/00_e_sys_env_cleanup: backport security fixes (Closes: #737705)
Checksums-Sha1: 
 77e6266cfa97adb10dce543d736abaf836e13cd9 2326 e17_0.17.3-3.dsc
 d234b33c331bcc7eeb1ccafe5ffb3efac2ec33d5 12756 e17_0.17.3-3.debian.tar.xz
 2928ea845e66f61b06af400e13aee3fc0c43aa79 1750618 e17_0.17.3-3_amd64.deb
 9bd151ef43098a4b7fa94285b29a6fd71c391bc1 24674084 e17-data_0.17.3-3_all.deb
 e79b2be95588cf21c732cdfbc97a9565a65122d7 71416 e17-dev_0.17.3-3_amd64.deb
 ec8814135453631d02bb8662afdd86b640e5ac2d 9942 e17-dbg_0.17.3-3_amd64.deb
Checksums-Sha256: 
 d9cf1c74a525e0aec2aff42d733c6d7ed1cc4eb000637928af514554226bd081 2326 e17_0.17.3-3.dsc
 7afb1f35b7949976afa6a75ba701af00f0048a8b43f76311212c2eddfbfe3fcb 12756 e17_0.17.3-3.debian.tar.xz
 e8e9f24bc7354317446f039ca9f3252e5cdcd57d71e9028aba2cffd86eef03ff 1750618 e17_0.17.3-3_amd64.deb
 b469ccf2e57905f208c410f7b6a2dacaa303883793ad6851656d708ccb46ac4f 24674084 e17-data_0.17.3-3_all.deb
 bb56ef4370251e1b4005a653c48bdbfa53e6c29f343b9786c6e8de5dc04a5fb9 71416 e17-dev_0.17.3-3_amd64.deb
 14c354bd93cf314d1e4e394d6956fa234ee2ef0d8746b5efefe65c2dd5e34d8d 9942 e17-dbg_0.17.3-3_amd64.deb
Files: 
 25e96532757a57422acf5e4928ef9fa2 2326 x11 optional e17_0.17.3-3.dsc
 97b5e792f16ee19784cb27dac076d5be 12756 x11 optional e17_0.17.3-3.debian.tar.xz
 dcc94c9226e9045789c26b8d5926f1fd 1750618 x11 optional e17_0.17.3-3_amd64.deb
 8e6013bdded82f13bcafedd04bf0a4d4 24674084 x11 optional e17-data_0.17.3-3_all.deb
 42697996767c689e1ab33d0a352e0325 71416 devel optional e17-dev_0.17.3-3_amd64.deb
 d69b19a1dda2beae8ca1920e164f30bf 9942 debug extra e17-dbg_0.17.3-3_amd64.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=HcTQ
-----END PGP SIGNATURE-----




Bug archived. Request was from Debbugs Internal Request <owner@bugs.debian.org> to internal_control@bugs.debian.org. (Sat, 15 Mar 2014 07:25:57 GMT) (full text, mbox, link).


Send a report that this bug log contains spam.


Debian bug tracking system administrator <owner@bugs.debian.org>. Last modified: Wed Jun 19 13:36:22 2019; Machine Name: buxtehude

Debian Bug tracking system

Debbugs is free software and licensed under the terms of the GNU Public License version 2. The current version can be obtained from https://bugs.debian.org/debbugs-source/.

Copyright © 1999 Darren O. Benham, 1997,2003 nCipher Corporation Ltd, 1994-97 Ian Jackson, 2005-2017 Don Armstrong, and many other contributors.