Bug#857699: ioquake3 has a security vulnerability

2017-03-14 Thread Daniel Gibson
Hi, I heard upstream is not gonna create a CVE, so go ahead.. Cheers, Daniel On 14.03.2017 17:44, Salvatore Bonaccorso wrote: Hi Simon, On Tue, Mar 14, 2017 at 08:30:36AM +, Simon McVittie wrote: cc'ing security team for information. No CVE ID yet, I assume ioquake3 upstream will be requ

Bug#857699: ioquake3 has a security vulnerability

2017-03-14 Thread Daniel Gibson
On 14.03.2017 09:30, Simon McVittie wrote: Thanks for reporting, I'll fix this ASAP. Awesome, thanks for the prompt reaction! Looks like I need to teach ioquake3 upstream about coordinated disclosure, or remind them that their game is in distributions. That might be a good idea, I had th

Bug#857699: ioquake3 has a security vulnerability

2017-03-13 Thread Daniel Gibson
Package: ioquake3 Version: 1.36 Severity: grave Hi, earlier today ioquake3 fixed a vulnerability that, as far as I understand, could let malicious multiplayer servers execute code on connecting clients. It affects all prior versions of ioquake3 (and I think also original Quake 3). Details: h

Bug#581240: [gdc-4.3] Calculation of MD5 sums seriously broken

2010-05-15 Thread Daniel Gibson
On Thu, May 13, 2010 at 10:46 AM, Iain Buclaw wrote: > [i...@netbook ~]$ cat md5test.d > import std.md5; > import std.stdio; > void main(){ > // testcase from md5.d unittests > ubyte[16] digest; > sum (digest, "abc"); > writefln(digestToString(digest)); >     assert(digest == cast(ubyte[])x"900150

Bug#581698: similar bug in Ubuntu bugtracker

2010-05-15 Thread Daniel Gibson
On Sat, May 15, 2010 at 9:32 PM, Iain Buclaw wrote: > That indeed it is, and I've been aware of it for a while. > I actually fixed this with the patch in bug 581240 - hitting two birds with > one stone. > http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=581240#20 > If you have a look, the update

Bug#581698: similar bug in Ubuntu bugtracker

2010-05-15 Thread Daniel Gibson
I just found the following Bugreport in Ubuntu's bugtracker: https://bugs.launchpad.net/ubuntu/+source/gdc-4.3/+bug/570913 ("Classes nested in functions are not written to object files"), I guess it's the same bug. Cheers, - Daniel -- To UNSUBSCRIBE, email to debian-bugs-rc-requ...@lists.deb

Bug#581698: [gdc-4.3] gdc 4.3 fails on anonymous nested classes

2010-05-14 Thread Daniel Gibson
Package: gdc-4.3 Version: 1:1.046-4.3.4-5 Severity: serious Hi, gdc-4.3 fails to compile code with anonymous nested classes. gdc-4.1 and dmd seem to have no problems, at least not with my code. If I try to extend Thread, I get the following compiletime-error: cae...@snaggletux:~/D_stuff$ gdc-4.

Bug#581240: [gdc-4.3] Calculation of MD5 sums seriously broken

2010-05-11 Thread Daniel Gibson
Package: gdc-4.3 Version: 1:1.046-4.3.4-5 Severity: serious The MD5-sums calculated by std.md5 are seriously broken - they're not only wrong, they're different on each run.. gdc-4.1 and the closed-source dmd do *not* have this bug. Because md5.d in the gdc-4.1 and gdc-4.3 package sources are iden