[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Launchpad Bug Tracker
This bug was fixed in the package postgis - 2.1.2+dfsg-2ubuntu0.1 --- postgis (2.1.2+dfsg-2ubuntu0.1) trusty-security; urgency=high * SECURITY UPDATE: crash of the database backend process when given invalid GeoJSON data (LP: #1438875) - debian/patches/geojson-fix-3094.patch

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Launchpad Bug Tracker
This bug was fixed in the package postgis - 2.1.3+dfsg-4ubuntu0.1 --- postgis (2.1.3+dfsg-4ubuntu0.1) utopic-security; urgency=high * SECURITY UPDATE: crash of the database backend process when given invalid GeoJSON data (LP: #1438875) - debian/patches/geojson-fix-3094.patch

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/postgis -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875 Title: Database crash with invalid geoJSON input To manage notifications about this bug go to: https://bugs

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Launchpad Bug Tracker
This bug was fixed in the package postgis - 2.1.5+dfsg-1~exp2ubuntu1 --- postgis (2.1.5+dfsg-1~exp2ubuntu1) vivid; urgency=high * SECURITY UPDATE: crash of the database backend process when given invalid GeoJSON data (LP: #1438875) - debian/patches/geojson-fix-3094.patch: ba

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Launchpad Bug Tracker
** Branch linked: lp:ubuntu/vivid-proposed/postgis -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875 Title: Database crash with invalid geoJSON input To manage notifications about this bug go t

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-02 Thread Marc Deslauriers
ACK on the debdiffs. I've uploaded them for building with a slight modification to the changelog to make it more consistent with our other security updates. Security updates will be released once they've built. Thanks! ** Changed in: postgis (Ubuntu Trusty) Status: New => Fix Committed *

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Bug Watch Updater
** Changed in: postgis (Debian) Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875 Title: Database crash with invalid geoJSON input To manage notificatio

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Artur Rona
** Also affects: postgis (Ubuntu Vivid) Importance: Medium Status: Confirmed ** Also affects: postgis (Ubuntu Utopic) Importance: Undecided Status: New ** Also affects: postgis (Ubuntu Trusty) Importance: Undecided Status: New -- You received this bug notification

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Johan Van de Wauw
** Patch added: "trusty debdiff" https://bugs.launchpad.net/debian/+source/postgis/+bug/1438875/+attachment/4363368/+files/postgis-trusty.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Ubuntu Foundations Team Bug Bot
The attachment "vivid debdiff" seems to be a debdiff. The ubuntu- sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, and if you

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Johan Van de Wauw
** Patch added: "Utopic debdiff" https://bugs.launchpad.net/ubuntu/+source/postgis/+bug/1438875/+attachment/4363268/+files/postgis_utopic.patch -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Johan Van de Wauw
** Patch added: "vivid debdiff" https://bugs.launchpad.net/ubuntu/+source/postgis/+bug/1438875/+attachment/4363265/+files/postgis_vivid.diff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875 T

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Johan Van de Wauw
I don't think there is a CVE number. I asked in the upstream bugtracker to be sure. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1438875 Title: Database crash with invalid geoJSON input To manage

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-04-01 Thread Steve Beattie
Since the debian bug and the upstream bug report are public, there's no point in keeping this bug report private, so I've made it public as well. Has a CVE been assigned for this issue? -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. h

[Bug 1438875] Re: Database crash with invalid geoJSON input

2015-03-31 Thread Steve Beattie
** Changed in: postgis (Ubuntu) Status: New => Confirmed ** Changed in: postgis (Ubuntu) Importance: Undecided => Medium ** Information type changed from Private Security to Public Security -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscri