Processed: user debian-secur...@lists.debian.org, usertagging 772008 ...

2015-01-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > user debian-secur...@lists.debian.org Setting user to debian-secur...@lists.debian.org (was car...@debian.org). > usertags 772008 + tracked Usertags were: tracked. Usertags are now: tracked. > retitle 772008 libmpfr4: CVE-2014-9474: buffer overflo

lletters_0.1.95+gtk2-4_source.changes ACCEPTED into unstable

2015-01-03 Thread Debian FTP Masters
Accepted: -BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Format: 1.8 Date: Tue, 23 Sep 2014 14:26:55 +0200 Source: lletters Binary: lletters Architecture: source Version: 0.1.95+gtk2-4 Distribution: unstable Urgency: medium Maintainer: Debian QA Group Changed-By: Markus Koschany Description:

Processing of lletters_0.1.95+gtk2-4_source.changes

2015-01-03 Thread Debian FTP Masters
lletters_0.1.95+gtk2-4_source.changes uploaded successfully to localhost along with the files: lletters_0.1.95+gtk2-4.dsc lletters_0.1.95+gtk2-4.diff.gz Greetings, Your Debian queue daemon (running on host franck.debian.org) -- To UNSUBSCRIBE, email to debian-qa-packages-requ...@li

Processing of lletters_0.1.95+gtk2-4_source.changes

2015-01-03 Thread Debian FTP Masters
lletters_0.1.95+gtk2-4_source.changes uploaded successfully to ftp-master.debian.org along with the files: lletters_0.1.95+gtk2-4.dsc lletters_0.1.95+gtk2-4.diff.gz Greetings, Your Debian queue daemon (running on host coccia.debian.org) -- To UNSUBSCRIBE, email to debian-qa-packag

Bug#774527: arc: directory traversal

2015-01-03 Thread Jakub Wilk
Package: arc Version: 5.21q-1 Tags: security arc is susceptible to directory traversal: $ pwd /home/jwilk $ arc x traversal.arc Extracting file: /tmp/moo $ ls -l /tmp/moo -rw-r--r-- 1 jwilk users 4 Jan 4 2015 /tmp/moo The script I used to create the test case is available at: https://bitbu

Bug#772008: CVE request: mpfr: buffer overflow in mpfr_strtofr

2015-01-03 Thread cve-assign
On Tue, 30 Dec 2014, Moritz Muehlenhoff wrote: On Mon, Dec 08, 2014 at 01:45:12PM +0100, Vasyl Kaigorodov wrote: Hello, A buffer overflow was reported [1] in mpfr. This is due to incorrect GMP documentation for mpn_set_str about the size of a buffer (discussion is at [1]; first fix in the GMP

Processed: severity of 674823 is important

2015-01-03 Thread Debian Bug Tracking System
Processing commands for cont...@bugs.debian.org: > severity 674823 important Bug #674823 [analog] analog: FTBFS on hurd-i386. Severity set to 'important' from 'normal' > thanks Stopping processing here. Please contact me if you need assistance. -- 674823: http://bugs.debian.org/cgi-bin/bugreport