Bug#694999: cityhash: CVE-2012-6051

2012-12-09 Thread Alessandro Ghedini
On Tue, Dec 04, 2012 at 10:45:45PM +0100, Moritz Muehlenhoff wrote: > On Mon, Dec 03, 2012 at 12:00:18PM +0100, Alessandro Ghedini wrote: > > I opened a ticket upstream but it doesn't appear to be fixed. It's not > > clear if > > Debian is affected though: the CVE was published 6 days after the 1.

Bug#694999: cityhash: CVE-2012-6051

2012-12-04 Thread Moritz Muehlenhoff
On Mon, Dec 03, 2012 at 12:00:18PM +0100, Alessandro Ghedini wrote: > forwarded 694999 http://code.google.com/p/cityhash/issues/detail?id=10 > kthxbye > > On Mon, Dec 03, 2012 at 08:22:47AM +0100, Moritz Muehlenhoff wrote: > > Package: cityhash > > Severity: grave > > Tags: security > > Justificat

Bug#694999: cityhash: CVE-2012-6051

2012-12-03 Thread Alessandro Ghedini
On Mon, Dec 03, 2012 at 12:00:18PM +0100, Alessandro Ghedini wrote: > On Mon, Dec 03, 2012 at 08:22:47AM +0100, Moritz Muehlenhoff wrote: > > I'm not sure if/when this was fixed upstream, so better contact upstream. > > the CVE was published 6 days after the 1.1.0 release After 6 days... and a mo

Processed: Re: Bug#694999: cityhash: CVE-2012-6051

2012-12-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > forwarded 694999 http://code.google.com/p/cityhash/issues/detail?id=10 Bug #694999 [cityhash] cityhash: CVE-2012-6051 Set Bug forwarded-to-address to 'http://code.google.com/p/cityhash/issues/detail?id=10'. > kthxbye Stopping processing here. Pl

Bug#694999: cityhash: CVE-2012-6051

2012-12-03 Thread Alessandro Ghedini
forwarded 694999 http://code.google.com/p/cityhash/issues/detail?id=10 kthxbye On Mon, Dec 03, 2012 at 08:22:47AM +0100, Moritz Muehlenhoff wrote: > Package: cityhash > Severity: grave > Tags: security > Justification: user security hole > > Hi, Hi, > please see http://cve.mitre.org/cgi-bin/cve

Bug#694999: cityhash: CVE-2012-6051

2012-12-02 Thread Moritz Muehlenhoff
Package: cityhash Severity: grave Tags: security Justification: user security hole Hi, please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6051 I'm not sure if/when this was fixed upstream, so better contact upstream. Cheers, Moritz -- To UNSUBSCRIBE, email to debian-bug