This bug was fixed in the package db5.3 - 5.3.28+dfsg1-0.8ubuntu1 --------------- db5.3 (5.3.28+dfsg1-0.8ubuntu1) impish; urgency=low
* Merge from Debian unstable (LP: #1927978). Remaining changes: - SECURITY UPDATE: Heap out-of-bounds read - debian/patches/CVE-2019-8457.patch: enhance the rtreenode function in lang/sql/sqlite/ext/rtree/rtree.c. - CVE-2019-8457 * Removed patches obsoleted/merged by upstream: - Fix FTBFS due to multiple definitions of progname, switch one of them to glibc provided program_invocation_name. - Test-suite sh_list segfaults when db5.3 built with gcc-10, switch to gcc-9. - Build everything with gcc-9. -- Dave Jones <dave.jo...@canonical.com> Tue, 23 Mar 2021 15:15:50 +0000 ** Changed in: db5.3 (Ubuntu) Status: Fix Committed => Fix Released ** CVE added: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2019-8457 -- You received this bug notification because you are a member of Ubuntu Touch seeded packages, which is subscribed to db5.3 in Ubuntu. https://bugs.launchpad.net/bugs/1927978 Title: Please merge db5.3 5.3.28+dfsg1-0.8 from Debian unstable Status in db5.3 package in Ubuntu: Fix Released Bug description: Please merge db5.3 5.3.28+dfsg1-0.8 from Debian unstable. Updated changelog and diff against Debian unstable to be attached below. To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/db5.3/+bug/1927978/+subscriptions -- Mailing list: https://launchpad.net/~touch-packages Post to : touch-packages@lists.launchpad.net Unsubscribe : https://launchpad.net/~touch-packages More help : https://help.launchpad.net/ListHelp