Ubuntu
changetrack package

Please sync changetrack 4.5-3 (universe) from Debian unstable (main).

Bug #433065 reported by Bhavani Shankar
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
changetrack (Ubuntu)
Fix Released
Wishlist
Unassigned

Bug Description

Please sync changetrack 4.5-3 (universe) from Debian unstable (main).

Please sync the package from debian as it fixes a potential CVE bug.

Changelog since current karmic version 4.5-1:

changetrack (4.5-3) unstable; urgency=medium

  * [reject-weird-filenames.diff] Also reject filenames with exclamation
    marks, avoid spaces in auxiliary files, and quote filenames whereever
    possible. Urgency due to security implications.

 -- Jens Peter Secher <email address hidden> Sun, 20 Sep 2009 15:01:44 +0200

changetrack (4.5-2) unstable; urgency=low

  * [reject-weird-filenames.diff] Fix possible local exploit by rejecting
    filenames with unsafe characters (cf. CVE-2009-3233). Thanks to Marek
    Grzybowski and Andrzej Lemieszek.
    (Closes: #546791)

 -- Jens Peter Secher <email address hidden> Thu, 17 Sep 2009 22:32:43 +0200

See original description
Tags: sync

CVE References

Revision history for this message
Benjamin Drung (bdrung) wrote :

sync request ACK'd

description: updated
tags: added: sync
summary: - Please sync changetrack 4.5-2 (universe) from Debian unstable (main).
+ Please sync changetrack 4.5-3 (universe) from Debian unstable (main).
Changed in changetrack (Ubuntu):
status: New → Confirmed
Revision history for this message
Andrew Starr-Bochicchio (andrewsomething) wrote :

@ Benny: After ACKing a sync request, please remember to un-subscribe sponsors so it doesn't show up in the queue anymore.

Revision history for this message
Benjamin Drung (bdrung) wrote :

I remember this, but I am not a member of the ubuntu-universe-sponsors team yet. Therefore I cannot unsubscribe the team.

Revision history for this message
Jonathan Riddell (jr) wrote :

Getting binaries for karmic...
[Updating] changetrack (4.5-1 [Ubuntu] < 4.5-3 [Debian])
 * Trying to add changetrack...
  - <changetrack_4.5-3.dsc: downloading from http://ftp.debian.org/debian/>
  - <changetrack_4.5-3.diff.gz: downloading from http://ftp.debian.org/debian/>
  - <changetrack_4.5.orig.tar.gz: already in distro - downloading from librarian>
I: changetrack [universe] -> changetrack_4.5-1 [universe].

Changed in changetrack (Ubuntu):
status: Confirmed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.