Bug 20131
| Summary: | CVE-2009-1759 "btFiles::BuildFromMI()" Buffer Overflow | ||||||
|---|---|---|---|---|---|---|---|
| Product: | Sisyphus | Reporter: | Vladimir Lettiev <crux> | ||||
| Component: | ctorrent | Assignee: | Grigory Ustinov <grenka> | ||||
| Status: | CLOSED FIXED | QA Contact: | qa-sisyphus | ||||
| Severity: | blocker | ||||||
| Priority: | P3 | CC: | andrewclarkii, grenka, php-coder, serpiph | ||||
| Version: | unstable | Keywords: | security | ||||
| Hardware: | all | ||||||
| OS: | Linux | ||||||
| URL: | http://secunia.com/advisories/34752/ | ||||||
| Attachments: |
|
||||||
Created attachment 3550 [details]
патч для устранения уязвимости
А воз и ныне там... Ни обновления до новой версии, ни закрывания ошибки... andyc@ вот-вот пройдет join@ и заберет этот пакет. Пакет собран: http://git.altlinux.org/tasks/10531/task/log 2009-Aug-10 12:33:02 :: task #10531 for sisyphus started: #1 build 3.3.2-alt1 from /people/andyc/packages/ctorrent.git 2009-Aug-10 12:33:05 :: created pkg.tar for ctorrent.git tag 3.3.2-alt1 2009-Aug-10 12:33:07 :: [x86_64] ctorrent.git 3.3.2-alt1: build start 2009-Aug-10 12:33:07 :: [i586] ctorrent.git 3.3.2-alt1: build start 2009-Aug-10 12:33:56 :: [i586] ctorrent.git 3.3.2-alt1: build OK 2009-Aug-10 12:33:57 :: [x86_64] ctorrent.git 3.3.2-alt1: build OK 2009-Aug-10 12:33:59 :: build check OK 2009-Aug-10 12:34:00 :: plan OK 2009-Aug-10 12:34:00 :: version check OK 2009-Aug-10 12:34:13 :: created test repo 2009-Aug-10 12:34:23 :: dependencies check OK 2009-Aug-10 12:35:30 :: ELF symbols check OK 2009-Aug-10 12:35:44 :: install check OK 2009-Aug-10 12:35:44 :: gears inheritance check OK 2009-Aug-10 12:35:44 :: girar-check-perms: access to ctorrent ALLOWED for andyc: project is orphaned 2009-Aug-10 12:35:44 :: acl check OK 2009-Aug-10 12:35:44 :: packages update OK 2009-Aug-10 12:35:44 :: repo update OK 2009-Aug-10 12:35:56 :: contents_index update OK 2009-Aug-10 12:36:11 :: created /gears/c/ctorrent.git branch `sisyphus' 2009-Aug-10 12:36:19 :: gears update OK 2009-Aug-10 12:36:19 :: ACL for orphaned project `ctorrent' assigned to user `andyc' 2009-Aug-10 12:36:29 :: task #10531 for sisyphus COMPLETE |
Description
Vladimir Lettiev 2009-05-21 16:51:26 MSD