Bug#699351: linux-gd obsolete and lubupnp4

2013-02-04 Thread VALETTE Eric OLNC/OLPS
On 02/02/2013 01:30 AM, Scott Howard wrote: retitle 699351 linux-igd follows old UPnP IGD V1 spec thanks On Thu, Jan 31, 2013 at 3:32 AM, VALETTE Eric OLNC/OLPS wrote: Look at the CVE that have been filled regarding libupnp6 and the associated bug

Processed: Re: Bug#699351: linux-gd obsolete and lubupnp4

2013-02-01 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > retitle 699351 linux-igd follows old UPnP IGD V1 spec Bug #699351 [linux-igd] linux-igd is obsolete, use a very old libpunnp version subject to numerous security bug Changed Bug title to 'linux-igd follows old UPnP IGD V1 spec' from 'linux-igd i

Bug#699351: linux-gd obsolete and lubupnp4

2013-02-01 Thread Scott Howard
retitle 699351 linux-igd follows old UPnP IGD V1 spec thanks On Thu, Jan 31, 2013 at 3:32 AM, VALETTE Eric OLNC/OLPS wrote: > Look at the CVE that have been filled regarding libupnp6 and the associated > bugs. Thanks - they have been fixed in libupnp4 [1]. I've renamed the bug appropriately. I

Bug#699351: linux-gd obsolete and lubupnp4

2013-01-31 Thread Scott Howard
On Thu, Jan 31, 2013 at 3:32 AM, VALETTE Eric OLNC/OLPS wrote: > Look at the CVE that have been filled regarding libupnp6 and the associated > bugs. Thanks, I'll put something on libupnp4's debian BTS so it's on their radar. >> Are there security problems with linux-igd independent of libupnp4?

Bug#699351: linux-gd obsolete and lubupnp4

2013-01-31 Thread VALETTE Eric OLNC/OLPS
On 01/30/2013 10:26 PM, Scott Howard wrote: Hello Eric, You wrote: "Linux-igd is dead code, use very old libpunp version that contains numerous security holes. Besides this version is not compatible with IPV6 as required by UPnP IGD V2 specification." I believe yo

Bug#699351: linux-gd obsolete and lubupnp4

2013-01-30 Thread Scott Howard
Hello Eric, You wrote: "Linux-igd is dead code, use very old libpunp version that contains numerous security holes. Besides this version is not compatible with IPV6 as required by UPnP IGD V2 specification." I believe you mean libupnp4 contains numerous security holes - have they been reported in