[Bug 1433806] [NEW] Sync exiv2 0.24-4.1 (main) from Debian unstable (main)
Launchpad Bug Tracker
1433806 at bugs.launchpad.net
Wed Mar 18 22:05:15 UTC 2015
You have been subscribed to a public bug by Artur Rona (ari-tczew):
Please sync exiv2 0.24-4.1 (main) from Debian unstable (main)
Explanation of the Ubuntu delta and why it can be dropped:
* SECURITY UPDATE: denial of service via buffer overflow
- debian/patches/CVE-2014-9449.patch: fix overflow in
src/riffvideo.cpp.
- CVE-2014-9449
CVE-2014-9449 is already fixed in Debian.
Changelog entries since current vivid version 0.24-4ubuntu1:
exiv2 (0.24-4.1) unstable; urgency=medium
* Non-maintainer upload.
* Add CVE-2014-9449.patch patch.
CVE-2014-9449: buffer overflow in RiffVideo::infoTagsHandler
Thanks to Klaus Ethgen <Klaus at Ethgen.de> (Closes: #773846)
-- Salvatore Bonaccorso <carnil at debian.org> Wed, 07 Jan 2015 20:25:48
+0100
** Affects: exiv2 (Ubuntu)
Importance: Wishlist
Status: New
--
Sync exiv2 0.24-4.1 (main) from Debian unstable (main)
https://bugs.launchpad.net/bugs/1433806
You received this bug notification because you are a member of Ubuntu Sponsors Team, which is subscribed to the bug report.
More information about the Ubuntu-sponsors
mailing list