Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 06:56:30PM +0100, Moritz Mühlenhoff wrote: > On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > > Hi, > > > > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > > CVE-2018-7999[0]: > > > | In libgraphite2 in graphite2 1.3.11, a NUL

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Moritz Mühlenhoff
On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > Hi, > > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > CVE-2018-7999[0]: > > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > > | vulnerability was found in Segment.cpp during a dumbRend

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 02:02:22PM +0100, Rene Engelhard wrote: > On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > > CVE-2018-7999[0]: > > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > > | vulnerability was found in Segment.cpp during a dumbRenderin

graphite2_1.3.11-2_source.changes ACCEPTED into unstable

2018-03-11 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 11 Mar 2018 13:22:48 +0100 Source: graphite2 Binary: libgraphite2-3 libgraphite2-dev libgraphite2-doc libgraphite2-utils Architecture: source Version: 1.3.11-2 Distribution: unstable Urgency: medium Maintainer: Deb

Bug#892590: marked as done (graphite2: CVE-2018-7999: null pointer dereference in Segment())

2018-03-11 Thread Debian Bug Tracking System
Your message dated Sun, 11 Mar 2018 13:06:20 + with message-id and subject line Bug#892590: fixed in graphite2 1.3.11-2 has caused the Debian Bug report #892590, regarding graphite2: CVE-2018-7999: null pointer dereference in Segment() to be marked as done. This means that you claim that the

Processing of graphite2_1.3.11-2_source.changes

2018-03-11 Thread Debian FTP Masters
graphite2_1.3.11-2_source.changes uploaded successfully to localhost along with the files: graphite2_1.3.11-2.dsc graphite2_1.3.11-2.debian.tar.xz graphite2_1.3.11-2_source.buildinfo Greetings, Your Debian queue daemon (running on host usper.debian.org)

Accepted graphite2 1.3.11-2 (source) into unstable

2018-03-11 Thread Rene Engelhard
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Sun, 11 Mar 2018 13:22:48 +0100 Source: graphite2 Binary: libgraphite2-3 libgraphite2-dev libgraphite2-doc libgraphite2-utils Architecture: source Version: 1.3.11-2 Distribution: unstable Urgency: medium Maintainer: Debian LibreOffi

Processed: Bug #892590 in graphite2 marked as pending

2018-03-11 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #892590 [src:graphite2] graphite2: CVE-2018-7999: null pointer dereference in Segment() Ignoring request to alter tags of bug #892590 to the same tags previously set -- 892590: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892590 Debian Bug

Processed: Bug #892590 in graphite2 marked as pending

2018-03-11 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #892590 [src:graphite2] graphite2: CVE-2018-7999: null pointer dereference in Segment() Ignoring request to alter tags of bug #892590 to the same tags previously set -- 892590: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892590 Debian Bug

Bug#892590: graphite2: CVE-2018-7999: null pointer dereference in Segment()

2018-03-11 Thread Rene Engelhard
Hi, On Sun, Mar 11, 2018 at 08:43:32AM +0100, Salvatore Bonaccorso wrote: > CVE-2018-7999[0]: > | In libgraphite2 in graphite2 1.3.11, a NULL pointer dereference > | vulnerability was found in Segment.cpp during a dumbRendering > | operation, which may allow attackers to cause a denial of service

Processed: Bug #892590 in graphite2 marked as pending

2018-03-11 Thread Debian Bug Tracking System
Processing control commands: > tag -1 pending Bug #892590 [src:graphite2] graphite2: CVE-2018-7999: null pointer dereference in Segment() Added tag(s) pending. -- 892590: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=892590 Debian Bug Tracking System Contact ow...@bugs.debian.org with probl

Processed: found 892590 in 1.3.10-1

2018-03-11 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > found 892590 1.3.10-1 Bug #892590 [src:graphite2] graphite2: CVE-2018-7999: null pointer dereference in Segment() Marked as found in versions graphite2/1.3.10-1. > thanks Stopping processing here. Please contact me if you need assistance. -- 89