Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.bugs.dist > #1064643

Bug#991120: buster-pu: package postsrsd/1.5-2+deb10u2

Cross-posted to 2 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

Package: release.debian.org
Severity: normal
Tags: buster
User: release.debian.org@packages.debian.org
Usertags: pu

[ Reason ]
Security fix for CVE-2021-35525.

[ Impact ]
Package is vulnerable to a potential DoS attack.

[ Tests ]
The version in buster didn't have any integration tests nor autopkgtests, so I 
didn't backport those. However, I did run the test suite from the package in 
testing against the buster version and it passes (except some tests for new 
features that aren't present in buster). I've also manually verified that the 
package still works.

[ Risks ]
Fix is a one-to-one backport from upstream, modulus formatting changes.

[ Checklist ]
  [x] *all* changes are documented in the d/changelog
  [x] I reviewed all changes and I approve them
  [x] attach debdiff against the package in (old)stable
  [ ] the issue is verified as fixed in unstable

As of writing the fix isn't in unstable yet, since I don't have upload rights. 
I've asked my sponsor to upload the fix for both stable and unstable at the 
same time -- it seemed unnecessary to add another roundtrip delay, as it's 
exactly the same fix.

[ Changes ]
Add patch with security fix for CVE-2021-35525.

[ Other info ]
N/A.

Back to linux.debian.bugs.dist | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

Bug#991120: buster-pu: package postsrsd/1.5-2+deb10u2 Oxan van Leeuwen <oxan@oxanvanleeuwen.nl> - 2021-07-14 22:10 +0200
  Bug#991120: buster-pu: package postsrsd/1.5-2+deb10u2 "Adam D. Barratt" <adam@adam-barratt.org.uk> - 2021-07-18 19:40 +0200

csiph-web