[ubuntu/precise-security] osc 0.132.6-1ubuntu0.1 (Accepted)
Marc Deslauriers
marc.deslauriers at canonical.com
Wed Jul 17 18:40:26 UTC 2013
osc (0.132.6-1ubuntu0.1) precise-security; urgency=low
* SECURITY UPDATE: Improper sanitization of terminal emulator escape
sequences when displaying build log and build status (LP: #1197639)
- debian/patches/CVE-2012-1095.patch: osc/core.py(print_buildlog): strip
terminal control chars, except new lines from build logs. Based on
upstream patch.
- CVE-2012-1095
Date: 2013-07-17 17:55:13.818557+00:00
Changed-By: Christian Kuersteiner <ckuerste at gmx.ch>
Signed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/precise/+source/osc/0.132.6-1ubuntu0.1
-------------- next part --------------
Sorry, changesfile not available.
More information about the Precise-changes
mailing list