[ubuntu/natty-security] usbmuxd 1.0.7-1ubuntu0.11.04.1 (Accepted)

Leo Iannacone l3on at ubuntu.com
Wed Feb 1 15:34:05 UTC 2012


usbmuxd (1.0.7-1ubuntu0.11.04.1) natty-security; urgency=high

  * SECURITY UPDATE: fix possible buffer overflow
    - 90-cve-2012-0065.patch: use strncpy() instead of strcpy in
      libusbmuxd/libusbmuxd.c receive_packet() with a size that
      ensures we don't overflow dev->serial_number
    - CVE-2012-0065
    - LP: #919435

Date: Sun, 29 Jan 2012 16:14:32 +0100
Changed-By: Leo Iannacone <l3on at ubuntu.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
https://launchpad.net/ubuntu/natty/+source/usbmuxd/1.0.7-1ubuntu0.11.04.1
-------------- next part --------------
Format: 1.8
Date: Sun, 29 Jan 2012 16:14:32 +0100
Source: usbmuxd
Binary: usbmuxd libusbmuxd1 libusbmuxd-dev libusbmuxd1-dbg
Architecture: source
Version: 1.0.7-1ubuntu0.11.04.1
Distribution: natty-security
Urgency: high
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Leo Iannacone <l3on at ubuntu.com>
Description: 
 libusbmuxd-dev - USB multiplexor daemon for iPhone and iPod Touch devices - devel
 libusbmuxd1 - USB multiplexor daemon for iPhone and iPod Touch devices - librar
 libusbmuxd1-dbg - USB multiplexor daemon for iPhone and iPod Touch devices - debug
 usbmuxd    - USB multiplexor daemon for iPhone and iPod Touch devices
Launchpad-Bugs-Fixed: 919435
Changes: 
 usbmuxd (1.0.7-1ubuntu0.11.04.1) natty-security; urgency=high
 .
   * SECURITY UPDATE: fix possible buffer overflow
     - 90-cve-2012-0065.patch: use strncpy() instead of strcpy in
       libusbmuxd/libusbmuxd.c receive_packet() with a size that
       ensures we don't overflow dev->serial_number
     - CVE-2012-0065
     - LP: #919435
Checksums-Sha1: 
 92d4971b35db16379c1223ce0d7f4cae3a6a2268 2085 usbmuxd_1.0.7-1ubuntu0.11.04.1.dsc
 3d93bef43d8c37afa4c80c187f1e6ef25dada5e6 6533 usbmuxd_1.0.7-1ubuntu0.11.04.1.debian.tar.gz
Checksums-Sha256: 
 a15bef6a83c879b34260c5d561612b0fd04bd166b5b108085bf903b95a3a1cb3 2085 usbmuxd_1.0.7-1ubuntu0.11.04.1.dsc
 c599800365faaa224c8f866dccfec249afafb1ca8049ea56dd4359e337449113 6533 usbmuxd_1.0.7-1ubuntu0.11.04.1.debian.tar.gz
Files: 
 cbcc825403fa6655687e655f5e8c229f 2085 utils optional usbmuxd_1.0.7-1ubuntu0.11.04.1.dsc
 d897c67cb1fdbab010e0504bfa295f99 6533 utils optional usbmuxd_1.0.7-1ubuntu0.11.04.1.debian.tar.gz
Original-Maintainer: Julien Lavergne <julien.lavergne at gmail.com>


More information about the Natty-changes mailing list