[Bug 82401] Please sync geoip (main) from unstable (main)

Kees Cook kees at ubuntu.com
Wed Jan 31 01:42:38 GMT 2007


Public bug reported:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

 affects distros/ubuntu/geoip
 status confirmed
 subscribe ubuntu-archive

Please sync geoip (main) from Debian unstable (main).

Changelog since current feisty version 1.3.17-1ubuntu1:

geoip (1.3.17-1.1) unstable; urgency=high

  * Non-maintainer upload by security team.
  * Added patch for CVE-2007-0159: libgeoip1:
    "GeoIP_update_database_general()" Remote Directory Traversal Vulnerability
    (Closes: #406628)
  * Removed automatically copying of config.status and config.sub - this
    creates a bloated diff for security updates.

 -- Neil McGovern <neilm at debian.org>  Sat, 27 Jan 2007 10:23:23 +0000


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)

iD4DBQFFv/PHH/9LqRcGPm0RAvydAKCYONfCKdPhXFymn1j3yPJ0JuQwiQCVFIOk
t+F3HDJn0Had+oCL0x93kw==
=sjOc
-----END PGP SIGNATURE-----

** Affects: geoip (Ubuntu)
     Importance: Undecided
         Status: Confirmed

-- 
Please sync geoip (main) from unstable (main)
https://launchpad.net/bugs/82401



More information about the ubuntu-archive mailing list