Bug#697108: [Pkg-gnupg-maint] Bug#697108: gnupg key import memory corruption

2013-01-03 Thread Werner Koch
On Wed, 2 Jan 2013 21:33, glaub...@physik.fu-berlin.de said: > Yeah, you were 6 minutes faster than me :). I am happy anyways the > issue has been addressed. Thanks a lot for your quick response! Please note that the problem also exists in 2.0 - a quite similar patch is in the GIT (or try the on

Bug#697108: [Pkg-gnupg-maint] Bug#697108: gnupg key import memory corruption

2013-01-02 Thread John Paul Adrian Glaubitz
On Wed, Jan 02, 2013 at 09:30:16PM +0100, Thijs Kinkhorst wrote: > On Wed, January 2, 2013 20:53, John Paul Adrian Glaubitz wrote: > > Package: gnupg > > Version: 1.4.12-6 > > Followup-For: Bug #697108 > > > > Attaching proposed debdiff. Would do an NMU to fix the problem > > upon permission. > >

Bug#697108: [Pkg-gnupg-maint] Bug#697108: gnupg key import memory corruption

2013-01-02 Thread Thijs Kinkhorst
On Wed, January 2, 2013 20:53, John Paul Adrian Glaubitz wrote: > Package: gnupg > Version: 1.4.12-6 > Followup-For: Bug #697108 > > Attaching proposed debdiff. Would do an NMU to fix the problem > upon permission. Thanks for your offer! However, I just uploaded an update to gnupg along the same l

Bug#697108: gnupg key import memory corruption

2013-01-02 Thread John Paul Adrian Glaubitz
Package: gnupg Version: 1.4.12-6 Followup-For: Bug #697108 Attaching proposed debdiff. Would do an NMU to fix the problem upon permission. Cheers, Adrian diff -Nru gnupg-1.4.12/debian/changelog gnupg-1.4.12-CVE-2012-6085/debian/changelog --- gnupg-1.4.12/debian/changelog 2012-10-14 12:11:27.

Bug#697108: gnupg key import memory corruption

2013-01-02 Thread John Paul Adrian Glaubitz
Package: gnupg Version: 1.4.12-6 Followup-For: Bug #697108 Hi, the patch can be easily retrieved from the upstream git repository. It can be downloaded from [1]. I am tagging this bug report with "patch". Cheers, Adrian > [1] > http://git.gnupg.org/cgi-bin/gitweb.cgi?p=gnupg.git;a=patch;h=f79

Bug#697108: gnupg key import memory corruption

2013-01-01 Thread Moritz Muehlenhoff
On Tue, Jan 01, 2013 at 03:28:21PM +0100, Moritz Muehlenhoff wrote: > Package: gnupg > Version: 1.4.12-6 > Severity: grave > Tags: security > > Please see http://seclists.org/bugtraq/2012/Dec/151 This was assigned CVE-2012-6085 Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bug

Bug#697108: gnupg key import memory corruption

2013-01-01 Thread Moritz Muehlenhoff
Package: gnupg Version: 1.4.12-6 Severity: grave Tags: security Please see http://seclists.org/bugtraq/2012/Dec/151 Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org