Your message dated Sun, 17 Mar 2019 23:05:21 +0000
with message-id <[email protected]>
and subject line Bug#924348: fixed in tintin++ 2.01.5-2
has caused the Debian Bug report #924348,
regarding CVE-2019-7629
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
924348: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=924348
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: tintin++
Severity: grave
Tags: security
Please see http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7629
Cheers,
Moritz
--- End Message ---
--- Begin Message ---
Source: tintin++
Source-Version: 2.01.5-2
We believe that the bug you reported is fixed in the latest version of
tintin++, which is due to be installed in the Debian FTP archive.
A summary of the changes between this version and the previous one is
attached.
Thank you for reporting the bug, which will now be closed. If you
have further comments please address them to [email protected],
and the maintainer will reopen the bug report if appropriate.
Debian distribution maintenance software
pp.
Jozsef Nagy <[email protected]> (supplier of updated tintin++ package)
(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing [email protected])
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Thu, 14 Mar 2019 20:27:42 +0100
Source: tintin++
Architecture: source
Version: 2.01.5-2
Distribution: unstable
Urgency: high
Maintainer: Jozsef Nagy <[email protected]>
Changed-By: Jozsef Nagy <[email protected]>
Closes: 924348
Changes:
tintin++ (2.01.5-2) unstable; urgency=high
.
* Add security patch - backport fix of the following security bug:
- CVE-2019-7629:
Stack-based buffer overflow in the strip_vt102_codes function allows
remote attackers to execute arbitrary code by sending a long message
to the client.
(Closes: #924348)
Checksums-Sha1:
261363c5fe93231929b88cfafd8b6b71f984dc2c 1756 tintin++_2.01.5-2.dsc
e5f9d52c524a8812610695ff28bc01db18ae464b 20732 tintin++_2.01.5-2.debian.tar.xz
76a926ab901265753d6c5861e917d3986f828cc8 5945
tintin++_2.01.5-2_source.buildinfo
Checksums-Sha256:
42e95fcc6c99faae1577db77686dae023b748d5eebe368aca00f94e2fcef16c0 1756
tintin++_2.01.5-2.dsc
b8c4dbaa957e8a97768a3e3e918fcb6eb33a871a74994b4c576157095fd449d3 20732
tintin++_2.01.5-2.debian.tar.xz
ec049774173bf1725388cace309e0a9f924d2676e5036676bf9e6f11f625f2de 5945
tintin++_2.01.5-2_source.buildinfo
Files:
08519b6665a77a9fa4cec2b08938297d 1756 games optional tintin++_2.01.5-2.dsc
cf40a00831c2cae40a38c3e46db1cee9 20732 games optional
tintin++_2.01.5-2.debian.tar.xz
2b80fefee1067747b976f4f93413cfef 5945 games optional
tintin++_2.01.5-2_source.buildinfo
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEEkjZVexcMh/iCHArDweDZLphvfH4FAlyOzq8ACgkQweDZLphv
fH77Zg/+Jhyal96+llviU/c7LaLwcUDSo9XN/JdlTzyNGQpTZydp+HHBnq2j256b
L9Whs+/B6jDExurXU9ZEN51O9+E4PS2JlORtpG7RMLRdXo3YgvAn/BY7cHQH0+LZ
t/7Rojbr9b3fd2f2bLLKD2dkyGZOxvsHRG+ZtYX/NVTTjjBjjJMBWnyy2PzU78tT
dE6vAUt2j28a/ILHHm8b8zan3YCLGr+gYyZ4SWlPLPZHiIVpxMDBIuVbuIJsMjxN
+1ZiFAY2JylY+VDb1PkdhB9VR6cPNHrY16mC2JCZB7nQf+97/SrovzoHMIIHUjEp
NPjbOQUCfnCPp2fSkewsF61lqGdWfQrViGIiDfV8KbblUBWfZh1cXdcqs65SQ9a+
4KoNpqvD2qsser87GzBIFxWUF7YFZ4du01DWFPp+1sRaoSnckxIGZC03/140QXdS
5LmLEKG9+LJxbZTikO9zqv8F0gyRQexi88nUa0UzXsa/98grkqFyBUoLFraihjgw
7l4fbZRgNgdkm1UWvIbX3aG58gFMPHQ1Ee96B7CyCBTUIwnbhD3FpGBrEK318e5j
Sqs/TJ2jmQrhqv/d2a7IMt/CjrANf/vQG5gojJEf30XtoPBTs7IzSt0MVtHjucDx
37c/lneMzdUQG6yQ4ri8xsOTUnsRuQWzkr76Tu6Ttdsr0WWBb2o=
=7ZAC
-----END PGP SIGNATURE-----
--- End Message ---
