Ubuntu
reportbug package

  1. Bug #1353046
  2. Comment #3

Comment 3 for bug 1353046

Revision history for this message
Launchpad Janitor (janitor) wrote :

This bug was fixed in the package reportbug - 6.3.1ubuntu1.1

---------------
reportbug (6.3.1ubuntu1.1) precise-security; urgency=medium

  * SECURITY UPDATE: arbitrary code execution in compare_versions
    (LP: #1353046)
    - reportbug/checkversions.py: don't use os.system to compare versions.
    - reportbug/__init__.py: update version number.
    - CVE-2014-0479
 -- Marc Deslauriers <email address hidden> Tue, 05 Aug 2014 14:52:52 -0400