Launchpad has imported 8 comments from the remote bug at https://bugzilla.redhat.com/show_bug.cgi?id=471952.
If you reply to an imported comment from within Launchpad, your comment will be sent to the remote bug automatically. Read more about Launchpad's inter-bugtracker facilities at https://help.launchpad.net/InterBugTracking. ------------------------------------------------------------------------ On 2008-11-17T20:28:25+00:00 Josh wrote: htop 0.7 writes process names to a terminal without sanitizing non-printable characters, which might allow local users to hide processes, modify arbitrary files, or have unspecified other impact via a process name with "crazy control strings." http://www.openwall.com/lists/oss-security/2008/11/02/1 http://www.openwall.com/lists/oss-security/2008/11/14/3 http://bugs.debian.org/504144 http://xforce.iss.net/xforce/xfdb/46321 Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/0 ------------------------------------------------------------------------ On 2008-11-18T12:30:36+00:00 Fedora wrote: htop-0.8.1-2.fc9 has been submitted as an update for Fedora 9. http://admin.fedoraproject.org/updates/htop-0.8.1-2.fc9 Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/1 ------------------------------------------------------------------------ On 2008-11-18T12:30:39+00:00 Fedora wrote: htop-0.8.1-2.fc8 has been submitted as an update for Fedora 8. http://admin.fedoraproject.org/updates/htop-0.8.1-2.fc8 Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/2 ------------------------------------------------------------------------ On 2008-11-18T12:30:42+00:00 Fedora wrote: htop-0.8.1-2.fc10 has been submitted as an update for Fedora 10. http://admin.fedoraproject.org/updates/htop-0.8.1-2.fc10 Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/3 ------------------------------------------------------------------------ On 2008-11-18T15:57:03+00:00 Adam wrote: htop-0.8.1-2 has been built for EPEL (EL-4 and EL-5) http://buildsys.fedoraproject.org/build-status/job.psp?uid=783 http://buildsys.fedoraproject.org/build-status/job.psp?uid=784 Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/4 ------------------------------------------------------------------------ On 2008-11-19T14:50:50+00:00 Fedora wrote: htop-0.8.1-2.fc9 has been pushed to the Fedora 9 stable repository. If problems still persist, please make note of it in this bug report. Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/7 ------------------------------------------------------------------------ On 2008-11-19T14:56:40+00:00 Fedora wrote: htop-0.8.1-2.fc8 has been pushed to the Fedora 8 stable repository. If problems still persist, please make note of it in this bug report. Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/8 ------------------------------------------------------------------------ On 2008-11-22T16:47:18+00:00 Fedora wrote: htop-0.8.1-2.fc10 has been pushed to the Fedora 10 stable repository. If problems still persist, please make note of it in this bug report. Reply at: https://bugs.launchpad.net/ubuntu/+source/htop/+bug/299627/comments/10 ** Changed in: htop (Fedora) Status: Confirmed => Fix Released ** Changed in: htop (Fedora) Importance: Unknown => Medium -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to the bug report. https://bugs.launchpad.net/bugs/299627 Title: [CVE-2008-5076] htop does not filter non-printable characters in process names To manage notifications about this bug go to: https://bugs.launchpad.net/htop/+bug/299627/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
