Your message dated Mon, 22 Mar 2021 18:03:28 +0000 with message-id <e1lootk-0001in...@fasolo.debian.org> and subject line Bug#985671: fixed in cgal 5.2-3 has caused the Debian Bug report #985671, regarding CVE-2020-35636 CVE-2020-35628 CVE-2020-28636 CVE-2020-28601 to be marked as done.
This means that you claim that the problem has been dealt with. If this is not the case it is now your responsibility to reopen the Bug report if necessary, and/or fix the problem forthwith. (NB: If you are a system administrator and have no idea what this message is talking about, this may indicate a serious mail system misconfiguration somewhere. Please contact ow...@bugs.debian.org immediately.) -- 985671: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=985671 Debian Bug Tracking System Contact ow...@bugs.debian.org with problems
--- Begin Message ---Source: cgal Severity: grave Tags: security X-Debbugs-Cc: Debian Security Team <t...@security.debian.org> CVE-2020-35636 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 CVE-2020-35628 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 CVE-2020-28636 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 CVE-2020-28601 https://talosintelligence.com/vulnerability_reports/TALOS-2020-1225 Cheers, Moritz
--- End Message ---
--- Begin Message ---Source: cgal Source-Version: 5.2-3 Done: Joachim Reichel <reic...@debian.org> We believe that the bug you reported is fixed in the latest version of cgal, which is due to be installed in the Debian FTP archive. A summary of the changes between this version and the previous one is attached. Thank you for reporting the bug, which will now be closed. If you have further comments please address them to 985...@bugs.debian.org, and the maintainer will reopen the bug report if appropriate. Debian distribution maintenance software pp. Joachim Reichel <reic...@debian.org> (supplier of updated cgal package) (This message was generated automatically at their request; if you believe that there is a problem with it please contact the archive administrators by mailing ftpmas...@ftp-master.debian.org) -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sun, 21 Mar 2021 21:33:13 +0100 Source: cgal Architecture: source Version: 5.2-3 Distribution: unstable Urgency: medium Maintainer: Joachim Reichel <reic...@debian.org> Changed-By: Joachim Reichel <reic...@debian.org> Closes: 985671 Changes: cgal (5.2-3) unstable; urgency=medium . * Add patch to fix out-of-bounds accesses in Nef_* (issue #5371), CVE-2020-28601..28636, CVE-2020-35628..35636 (Closes: #985671). Checksums-Sha1: 54210fad6d4cb9db161d66bf96e00ea864bfc8f0 2272 cgal_5.2-3.dsc f14cafdc6034b2c0484a60cbe66cef68658bab99 23280 cgal_5.2-3.debian.tar.xz dde00e88519674b42819a99f8cc26e5e89560d90 13315 cgal_5.2-3_amd64.buildinfo Checksums-Sha256: 6a0f13e671621804eb5bfc7c109c77f78b5e152655becd868719e6e7c32b4890 2272 cgal_5.2-3.dsc 4f41c49d96657e51eec59595f2aa19fbd34b4d1fef46c843f2bd9c1d350f0f5f 23280 cgal_5.2-3.debian.tar.xz 7dd7f4b6d56713819a23f47012575771ff51fd2057ae5f8e7d0473bcf0605590 13315 cgal_5.2-3_amd64.buildinfo Files: a9e2ff3a2d87a9650b452305b9e838b3 2272 libs optional cgal_5.2-3.dsc b44da0834e12fdb63dd3ed3b92bb0b75 23280 libs optional cgal_5.2-3.debian.tar.xz 80a504402b2612f1804f838271392d42 13315 libs optional cgal_5.2-3_amd64.buildinfo -----BEGIN PGP SIGNATURE----- iQIzBAEBCAAdFiEErX6NzLwwsr4xjsEVuPr/HEOIZ3EFAmBY14MACgkQuPr/HEOI Z3FNwQ//TBGcIZlWgfXZCkEq6Vt9tGbw/L6eFp7D1R67sUjIztrUPOjjzvCOoP20 lPhmAWdB/L3oUFGOEV6YCr5YT+SiNhfmWYx5QbWF8AzWbrn4T/uUsKxekKe9pL9/ aBLOUdWA+d1ogdisPJ6vRTIrwB2dSYuvU/Q1hWIE9aBW9QMWs4gGl8YSQU8dJfA8 JoPWCI9aB6+ebVm1bcC8KbO33QCd/HRfn0ve7zh38TtIIWRpdQZS6Ekthr2wMUNf RAnZZut/Q8voGObrLtKyB+8YdpN7FSYTfBV/xhb2LxharDjjAfJMdloEAJOfB84K xiHKbeHiMXiNeUJiIK9b4L2mhm212RD70M1PYl84IKjugSA4bMjKbcCK+Q38Qzu2 a93pTaoYOmNL6Q/67k+yRQD4m19vhyQOU1svU9cvLxeGREWkwRfCw76TXbFvV0x1 rb1cagU5/A7/2ItWvPlTUyK98zajGYmwfeByascUBBhfyxmNAtn+0i2mJ5SXRSt9 QJsDmDQVqq+qaOAY8VU455rhIOaq0ymuHoFiCrT6YjCKu7IoTS2NXP++pgkN08Du Qtv/wpwEusgl/ur9nHU1Vff0TCxpsopV82wozXB/l76LdUnqZgIe4E2aH+yi8Cdm R62E6SFYMuBmXp8FXETdaJsIG+i7xzLPLg3Jtg4vWuaBGe6y1NE= =XZBV -----END PGP SIGNATURE-----
--- End Message ---
