This bug was fixed in the package postgis - 2.1.2+dfsg-2ubuntu0.1
---
postgis (2.1.2+dfsg-2ubuntu0.1) trusty-security; urgency=high
* SECURITY UPDATE: crash of the database backend process when given
invalid GeoJSON data (LP: #1438875)
- debian/patches/geojson-fix-3094.patch
This bug was fixed in the package postgis - 2.1.3+dfsg-4ubuntu0.1
---
postgis (2.1.3+dfsg-4ubuntu0.1) utopic-security; urgency=high
* SECURITY UPDATE: crash of the database backend process when given
invalid GeoJSON data (LP: #1438875)
- debian/patches/geojson-fix-3094.patch
** Branch linked: lp:ubuntu/postgis
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
Title:
Database crash with invalid geoJSON input
To manage notifications about this bug go to:
https://bugs
This bug was fixed in the package postgis - 2.1.5+dfsg-1~exp2ubuntu1
---
postgis (2.1.5+dfsg-1~exp2ubuntu1) vivid; urgency=high
* SECURITY UPDATE: crash of the database backend process when given
invalid GeoJSON data (LP: #1438875)
- debian/patches/geojson-fix-3094.patch: ba
** Branch linked: lp:ubuntu/vivid-proposed/postgis
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
Title:
Database crash with invalid geoJSON input
To manage notifications about this bug go t
ACK on the debdiffs. I've uploaded them for building with a slight
modification to the changelog to make it more consistent with our other
security updates.
Security updates will be released once they've built.
Thanks!
** Changed in: postgis (Ubuntu Trusty)
Status: New => Fix Committed
*
** Changed in: postgis (Debian)
Status: Confirmed => Fix Released
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
Title:
Database crash with invalid geoJSON input
To manage notificatio
** Also affects: postgis (Ubuntu Vivid)
Importance: Medium
Status: Confirmed
** Also affects: postgis (Ubuntu Utopic)
Importance: Undecided
Status: New
** Also affects: postgis (Ubuntu Trusty)
Importance: Undecided
Status: New
--
You received this bug notification
** Patch added: "trusty debdiff"
https://bugs.launchpad.net/debian/+source/postgis/+bug/1438875/+attachment/4363368/+files/postgis-trusty.diff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
The attachment "vivid debdiff" seems to be a debdiff. The ubuntu-
sponsors team has been subscribed to the bug report so that they can
review and hopefully sponsor the debdiff. If the attachment isn't a
patch, please remove the "patch" flag from the attachment, remove the
"patch" tag, and if you
** Patch added: "Utopic debdiff"
https://bugs.launchpad.net/ubuntu/+source/postgis/+bug/1438875/+attachment/4363268/+files/postgis_utopic.patch
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
** Patch added: "vivid debdiff"
https://bugs.launchpad.net/ubuntu/+source/postgis/+bug/1438875/+attachment/4363265/+files/postgis_vivid.diff
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
T
I don't think there is a CVE number. I asked in the upstream bugtracker
to be sure.
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1438875
Title:
Database crash with invalid geoJSON input
To manage
Since the debian bug and the upstream bug report are public, there's no
point in keeping this bug report private, so I've made it public as
well. Has a CVE been assigned for this issue?
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
h
** Changed in: postgis (Ubuntu)
Status: New => Confirmed
** Changed in: postgis (Ubuntu)
Importance: Undecided => Medium
** Information type changed from Private Security to Public Security
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscri
15 matches
Mail list logo