[Bug 1773720] Re: CVE-2017-15105

2018-06-07 Thread Launchpad Bug Tracker
This bug was fixed in the package unbound - 1.6.7-1ubuntu2.1 --- unbound (1.6.7-1ubuntu2.1) bionic-security; urgency=medium * SECURITY UPDATE: vulnerability in the processing of wildcard synthesized NSEC records (LP: #1773720) - debian/patches/CVE-2017-15105.patch - CVE-

[Bug 1773720] Re: CVE-2017-15105

2018-06-07 Thread Launchpad Bug Tracker
This bug was fixed in the package unbound - 1.5.8-1ubuntu1.1 --- unbound (1.5.8-1ubuntu1.1) xenial-security; urgency=medium * SECURITY UPDATE: vulnerability in the processing of wildcard synthesized NSEC records (LP: #1773720) - debian/patches/CVE-2017-15105.patch - CVE-

[Bug 1773720] Re: CVE-2017-15105

2018-06-07 Thread Launchpad Bug Tracker
This bug was fixed in the package unbound - 1.6.5-1ubuntu0.2 --- unbound (1.6.5-1ubuntu0.2) artful-security; urgency=medium * SECURITY UPDATE: vulnerability in the processing of wildcard synthesized NSEC records (LP: #1773720) - debian/patches/CVE-2017-15105.patch - CVE-

[Bug 1773720] Re: CVE-2017-15105

2018-06-01 Thread  Christian Ehrhardt 
This bug was fixed in the package unbound - 1.7.1-1 --- unbound (1.7.1-1) unstable; urgency=medium [ Robert Edmonds ] * debian/control: Update Vcs-* links to use salsa.debian.org URLs * New upstream version 1.7.1 [ Simon Deziel ] * debian/apparmor-profile: Add capabilities

[Bug 1773720] Re: CVE-2017-15105

2018-06-01 Thread  Christian Ehrhardt 
Migrated successfully, and done for Cosmic ** Also affects: unbound (Ubuntu Xenial) Importance: Undecided Status: New ** Also affects: unbound (Ubuntu Bionic) Importance: Undecided Status: New ** Also affects: unbound (Ubuntu Artful) Importance: Undecided Status: Ne

[Bug 1773720] Re: CVE-2017-15105

2018-05-31 Thread  Christian Ehrhardt 
Hi Simon, I agree that all Delta we currently carry is picked by Debian. Therefore making this a sync in Cosmic now [1]. It just started to build, lets see if there are any hickups on migration. [1]: https://launchpad.net/ubuntu/+source/unbound/1.7.1-1 -- You received this bug notification becau

[Bug 1773720] Re: CVE-2017-15105

2018-05-31 Thread Simon Déziel
@sbeattie, thanks for fixing the bionic and artful packages and sorry for the bad debdiffs. They built (and tested) fine locally, probably missing the patch as you highlighted though. I tested the bionic and artful builds from the ubuntu-security-proposed ppa and they work fine, thanks! I'll be lo

[Bug 1773720] Re: CVE-2017-15105

2018-05-31 Thread Steve Beattie
Hi Simon, So I hit a few issues with the debdiffs: - the patch taken from upstream is in patch -p0 format so quilt push would fail; attempting to adjust the quilt series file to use -p0 (I think, may have conflated with the following issue) failed during the package build. - the unbound packa

[Bug 1773720] Re: CVE-2017-15105

2018-05-28 Thread Steve Beattie
** Changed in: unbound (Ubuntu) Status: New => In Progress ** Changed in: unbound (Ubuntu) Assignee: (unassigned) => Steve Beattie (sbeattie) -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/

[Bug 1773720] Re: CVE-2017-15105

2018-05-27 Thread Ubuntu Foundations Team Bug Bot
The attachment "bionic-lp1773720.debdiff" seems to be a debdiff. The ubuntu-sponsors team has been subscribed to the bug report so that they can review and hopefully sponsor the debdiff. If the attachment isn't a patch, please remove the "patch" flag from the attachment, remove the "patch" tag, a

[Bug 1773720] Re: CVE-2017-15105

2018-05-27 Thread Simon Déziel
I've attached debdiffs for Xenial to Bionic. Please let me know if something needs a rework. For Cosmic, all that's needed is a sync from Debian. Merge-o-matic didn't do it due to the Ubuntu delta but fortunately this delta was adopted by Debian with Unbound 1.7.1-1. Should I open a new LP to ask

[Bug 1773720] Re: CVE-2017-15105

2018-05-27 Thread Simon Déziel
** Patch added: "artful-lp1773720.debdiff" https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1773720/+attachment/5145371/+files/artful-lp1773720.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.ne

[Bug 1773720] Re: CVE-2017-15105

2018-05-27 Thread Simon Déziel
** Patch added: "xenial-lp1773720.debdiff" https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1773720/+attachment/5145372/+files/xenial-lp1773720.debdiff -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.ne

[Bug 1773720] Re: CVE-2017-15105

2018-05-27 Thread Simon Déziel
** Information type changed from Public to Public Security ** Patch added: "bionic-lp1773720.debdiff" https://bugs.launchpad.net/ubuntu/+source/unbound/+bug/1773720/+attachment/5145370/+files/bionic-lp1773720.debdiff -- You received this bug notification because you are a member of Ubuntu Bu